We Keep Coding

HttpWebRequest - C# - Post with Certificate.crt + private.key

How can I send a certificate with Private.key?
I am sending only the certificate and it returns a 403 Forbidden error.
Certificate + Private.key
GetAccessToken Code
PegarCertificadoServicoPeloIndividuo - Code

I had the exact same problem with this API.
To solve it, I had to ''merge'' the two files (.crt and .key).
For this, it is necessary to download a program, follow this link: https://slproweb.com/products/Win32OpenSSL.html . I downloaded the exe from the first line from that link.
After merging the .crt and .key files, you'll get a .pfx file, that's what you'll use in code to make the call to the API.
Hope this helps

HTTP Client authentication using three .pem files (client cert, CA cert and key)

I'm trying to add a certificate to my HTTP Client (my HTTP request really) but I'm not quite sure what I'm doing.
I have three files:
key.pem
cert.pem
cacert.pem
I'm aware that the cacert.pem file does not require a key since it's just the public part, so I'm not looking for a key for that or trying to use my key.pem.
So what is it I'm exactly supposed to do? My endgoal is to simply have a request like
curl -k http://example.com -v -key c:\path\key.pem -cacert c:\path\cacert.pem -cert c:\path\cert.pem
from my HttpClient.
I know HTTP Client uses a collection of X509Certificate2 which can be extracted from a .pem file (and a key.pem file), but it doesn't look like it can be built from two. I also know there's a X509Chain which seems like something that could be useful but it also seems significantly more customizable than a simple "combine two certficats" tool would be.
I should mention that I am in no way versed in certificates or anything crypto, I'm a simple grease monkey mostly qualified in business logic, so please assume nothing except that I know very little on the subject and the tools needed for it.
UPD: One limitation I forgot to mention: I am using .NET Core 3.1 with no way to upgrade to .NET 5. Legacy code and all that.

How to properly export a cert file using c#?

I have an API that creates and exports certificates, I also have access to the UI to export them manually. The problem here is: when I export a cert using c# the API returns a well-formed base64 string, if I take this string and convert it to an X.509 object it still works, but, when I export this to a cert file it seems to be insecure. If I export the certificate manually it returns the exact base64 string, but it seems to be secure and well-formed.
So, what's the difference? or how could I export the base64 string to a cert file while avoiding insecurity issues?
Thanks in advance.
My current approach is:
File.WriteAllBytes("certification.cer", GetCertificate(base64).Export(System.Security.Cryptography.X509Certificates.X509ContentType.Cert));
And:
File.WriteAllBytes("certification.cer", Convert.FromBase64String(base64))

How to generate BinarySecurityToken (X509PKIPathv1) from .p12 file

I am trying to consume a Java web service from a C# client. The service requires BinarySecurityToken element with value type X509PKIPathv1.
<wsse:BinarySecurityToken EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary"
ValueType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-x509-token-profile-1.0#X509PKIPathv1">
MIIH......
</wsse:BinarySecurityToken>
Since WCF does not support X509PKIPathv1 value type, I am generating the SOAP message by hand, signing it using the SignedXml class, encrypting it using the EncryptedXml and sending it using the WebClient class. As for the value of BinarySecurityToken element, I used the value generated in SoapUI for the same certificate, and it works.
But, I would like to be able to generate this value programmatically from .p12 file, and not having to paste it from SoapUI again every time when the certificate expires.
The WS-Security documentation is a bit vague, so I am not sure how to go about it. This is all the information it gives about this token type:
#X509PKIPathv1: An ordered list of X.509 certificates packaged in a PKIPath
How to generate this value from .p12 file in C#? SoapUI does it somehow.

So this may not be a fully solution to your problem but it may help you out somewhat.
This:
#X509PKIPathv1: An ordered list of X.509 certificates packaged in a PKIPath
means is a asn1 sequence or chain of certificates that you have used to sign your message. You can even see it here.
To give some context asn1 is way of representing data in way independent of the machine you are using. This data is binary and not human readable so you transform it to bade 64 and that is what you see in that field.
I am not entirely sure what the exact content of your .p12 file is but at the very least I assume it has the certificate of the private key you used to sign your message and maybe the chain until the publicly trusted certificate or CA.
I am mostly a C++ developer and I know openssl provides a C like api to read a certificate manipulate the underlying asn1 structure and the output it as a string.
Sorry for not providing with a greater level of detail or a code example

Binary Security Token from p12 vs Binary Security Token from jks

I need to obtain the BinarySecurityToken to authenticate to Soap WebApi, I know that BinarySecurityToken is certificate content encoded in Base64. When I test api in SoapUI the Binary sec token is generated from jks file from my certificate, everything works. The problem is when I need to connect to api form C# then I am using p12 cert and getting encoded base64 content of cert like in jks file but the values are different and BinarySecurityToken from p12 is not working with Soap api.
Conclusion: BinarySecToken generated from jks is different than generated from p12.
Is there any way to generate BinarySecToken as same as from jks file?
Is any way to work with jks files in c# ?
This is how I get the BinarySecToken:
X509Certificate2 cert = new X509Certificate2(certPath,"pass");
var content = cert.RawData;
var base64content = Convert.ToBase64String(content);

BinarySecurityToken in .jks file is raw content data but with one difference. Token in jks file contains file size at the begining, token data generated from .p12 is the same data as jks but without file size. In my solution I solve it in other way. I think there is no solutions when you need to obtain BinarySecurityToken from file as raw data. There are other api mechanism that will solve it for you. When you want to obtain token as raw data from file, you do it something wrong and for sure that won't solve your issue.