Certificate Management – Create Certificate

Description

The following screenshot shows an example dialog for creating a new certificate. Press the button “Show Code” to display the corresponding code, and the button “Help” for further information.

This dialog is used in the .NET based OPC UA Demo Server and the Getting Started Client Example included in the SDK. On first start-up, the application checks for a certificate. If no certificate exists, the dialog for creating a new certificate shows up.

The input fields are filled with default values which can be changed to the user’s liking. On clicking the “Advanced” button, additional input fields show up, which can be hidden again by pressing the “Basic” button.

Clicking on “Create” stores the certificate, by clicking “Cancel” the process can be aborted.

Sample Code

ApplicationInstance.Default.AutoCreateCertificate = true;
ApplicationInstance.Default.MissingApplicationCertificate += new CreateCertificateEventHandler(Application_MissingApplicationCertificate);

To enable the automatic certificate creation, set AutoCreateCertificate to true.

private void Application_MissingApplicationCertificate(object sender, CreateCertificateEventArgs e)
{
    try
    {
        CreateCertificateDialog dialog = new CreateCertificateDialog();

        ICertificate certificate = dialog.ShowDialog(null, new CreateCertificateDialogSettings()
        {
            Application = e.Application,
            Instructions = "The application does not have a certificate assigned.\r\nPlease specify the parameters for a new certificate."
        });

        if (certificate != null)
        {
            e.NewCertificate = certificate;
            e.UpdateConfiguration = true;
        }
    }
    catch (Exception exception)
    {
        ExceptionDlg.Show(this.Text, exception);
    }
}

public CreateCertificateDialog()
{
    InitializeComponent();
    Icon = Utils.GetDefaultIcon();

    foreach (object value in Enum.GetValues(typeof(KeySize)))
    {
        KeySizeComboBox.Items.Add(value);
    }

    KeySizeComboBox.SelectedIndex = 0;

    foreach (object value in Enum.GetValues(typeof(HashAlgorithm)))
    {
        HashAlgorithmComboBox.Items.Add(value);
    }

    HashAlgorithmComboBox.SelectedIndex = 0;

    BasicButton_Click(this, null);
}

try
{
    Cursor = Cursors.WaitCursor;

    CreateCertificateSettings settings = new CreateCertificateSettings()
    {
        ApplicationName = ApplicationNameTextBox.Text.Trim(),
        ApplicationUri = ApplicationUriTextBox.Text.Trim(),
        SubjectName = SubjectNameTextBox.Text.Trim()
    };

    // get the path to the store where the new certificate will be placed.
    string storePath = StorePathTextBox.Text.Trim();

    if (String.IsNullOrEmpty(storePath))
    {
        throw new ArgumentException("Please specify a path to the certificate store.", "StorePath");
    }

    // get the path to the certificate (if provided) that will be used to sign the certificate.
    string issuerKeyFile = IssuerKeyFileTextBox.Text.Trim();

    if (!String.IsNullOrEmpty(issuerKeyFile))
    {
        string issuerPassword = IssuerPasswordTextBox.Text.Trim();

        if (!File.Exists(issuerKeyFile))
        {
            throw new ArgumentException("Please specify a valid path to an issuer key file.", "IssuerKeyFile");
        }

        try
        {
            X509Certificate2 certificate = null;

            if (String.IsNullOrEmpty(issuerPassword))
            {
                certificate = new X509Certificate2(issuerKeyFile);
            }
            else
            {
                certificate = new X509Certificate2(issuerKeyFile, issuerPassword);
            }
        }
        catch (CryptographicException exception)
        {
            throw new ArgumentException("Could not open the key file.", "IssuerKeyFile", exception);
        }

        settings.IssuerKeyFilePath = issuerKeyFile;
        settings.IssuerKeyFilePassword = issuerPassword;
    }

    // the name of the application.
    if (String.IsNullOrEmpty(settings.ApplicationName))
    {
        throw new ArgumentException("Please specify an application name.", "ApplicationName");
    }

    // the name of application uri.
    if (String.IsNullOrEmpty(settings.ApplicationUri))
    {
        throw new ArgumentException("Please specify an application URI.", "ApplicationUri");
    }

    if (!Uri.IsWellFormedUriString(settings.ApplicationUri, UriKind.Absolute))
    {
        throw new ArgumentException("Please specify a valid URI for the application URI.", "ApplicationUri");
    }

    // parse the subject name.
    List<string> fields = SecurityUtils.ParseDistinguishedName(settings.SubjectName);

    StringBuilder buffer = new StringBuilder();

    foreach (string field in fields)
    {
        if (buffer.Length > 0)
        {
            buffer.Append("/");
        }

        buffer.Append(field);
    }

    settings.SubjectName = buffer.ToString();

    // get the domains.
    string[] domainNames = DomainNamesTextBox.Text.Trim().Split(new char[] { ',' }, StringSplitOptions.RemoveEmptyEntries);

    for (int ii = 0; ii < domainNames.Length; ii++)
    {
        domainNames[ii] = domainNames[ii].Trim();
    }

    settings.DomainNames = domainNames;

    // get the key size.
    switch ((KeySize)KeySizeComboBox.SelectedItem)
    {
        case KeySize.Rsa1024: { settings.KeySize = 1024; break; }
        case KeySize.Rsa2048: { settings.KeySize = 2048; break; }
    }

    // get the hash algorithm.
    switch ((HashAlgorithm)HashAlgorithmComboBox.SelectedItem)
    {
        case HashAlgorithm.Sha1: { settings.HashSizeInBits = 0; break; }
        case HashAlgorithm.Sha256: { settings.HashSizeInBits = 256; break; }
    }

    settings.LifetimeInMonths = (ushort)LifetimeUpDown.Value;

    // create the new certificate.
    m_certificate = CertificateFactory.CreateCertificate(CertificateStoreType.Directory, storePath, settings);

    Cursor = Cursors.Default;

    DialogResult = DialogResult.OK;
}
catch (Exception exception)
{
    Cursor = Cursors.Default;

    ExceptionDlg.Show(this.Text, exception);
}