vslepakov/keyvault-ca

keyvault-ca's Issues

Root CA

Hi sir,

 I am working on a 802.1AR root CA project which will be based on Azure key vault. By accident I came across this project and went through the project with a limited knowledge of Azure key vault and dotnet. 

I roughly understand how a self-signed root CA is created in the project:

1. create a temporary self-signed certificate in Azure key vault and export its private key;
2. create a CSR with the same certificate name in Azure key vault and sign the CSR with the private key exported in the first step and merge to Azure key vault. A self-signed root CA certificate is saved in Azure key vault.

I am wondering how the two certificates ( the temporary self-signed certificate in step 1 and the self-signed root CA certificate in step2) have the same key pairs? Do I miss some point in the use of Azure key vault?

thanks

Tim

code snippet

Hi Sir,

Once again thank you for the amazing project, which has already lightened the path I should go with my project.
I have a question about the C# code. Sorry for my limited knowledge of .net and C#.

The code snippet below encodes an OID to a byte array. I could not get the encoding method. if I have an oid=1.2.840.10045.4.3.2 (ecdsa-with-sha256), what will be the encoded value--oidSequence?

Thanks!

Tim

public override byte[] GetSignatureAlgorithmIdentifier(HashAlgorithmName hashAlgorithm)
    {
        byte[] oidSequence;

        if (hashAlgorithm == HashAlgorithmName.SHA256)
        {
            //const string RsaPkcs1Sha256 = "1.2.840.113549.1.1.11";
            oidSequence = new byte[] { 48, 13, 6, 9, 42, 134, 72, 134, 247, 13, 1, 1, 11, 5, 0 };  
        }
        else if (hashAlgorithm == HashAlgorithmName.SHA384)
        {
            //const string RsaPkcs1Sha384 = "1.2.840.113549.1.1.12";
            oidSequence = new byte[] { 48, 13, 6, 9, 42, 134, 72, 134, 247, 13, 1, 1, 12, 5, 0 };
        }
        else if (hashAlgorithm == HashAlgorithmName.SHA512)
        {
            //const string RsaPkcs1Sha512 = "1.2.840.113549.1.1.13";
            oidSequence = new byte[] { 48, 13, 6, 9, 42, 134, 72, 134, 247, 13, 1, 1, 13, 5, 0 };
        }
        else
        {
            throw new ArgumentOutOfRangeException(nameof(hashAlgorithm), "The hash algorithm " + hashAlgorithm.Name + " is not supported.");
        }
        return oidSequence;
    }