标记为可导出的TLS证书私钥无法导出问题排查

我使用基于Certes和Bouncy Castle的代码生成Let's Encrypt TLS证书，并导入至CurrentUser证书存储。尽管已将私钥标记为可导出，但最终证书的私钥无法导出——证书存储显示密钥存在，但导出选项被禁用。

我参考过相关示例，这些示例通过RsaKeyPairGenerator生成密钥对，但我已有证书和密钥字节数组，此方式并不适用。

请问我的代码存在什么问题？如何生成并存储私钥可见且可导出的X509Certificate2实例？

我的代码 #

Public Class Tls
  Public Shared Async Function ImportAsync(NewCertificate As X509Certificate2) As Task(Of Result)
    Dim oCollection As X509Certificate2Collection
    Dim oQuery As Func(Of X509Certificate2, Boolean)

    Await Task.CompletedTask

    oQuery = Function(OldCertificate) OldCertificate.Subject = NewCertificate.Subject

    Using oStore As New X509Store(StoreName.My, StoreLocation.CurrentUser)
      oStore.Open(OpenFlags.ReadWrite)
      oCollection = New X509Certificate2Collection(oStore.Certificates.Where(oQuery).ToArray)
      oStore.RemoveRange(oCollection)
      oStore.Add(NewCertificate)
    End Using

    Return Result.Ok
  End Function

  Public Shared Async Function GenerateAsync(Order As IOrderContext, CityCode As String) As Task(Of Result(Of X509Certificate2))
    Dim oCertificateChain As CertificateChain
    Dim oCertificate As X509Certificate2
    Dim oPrivateKey As IKey
    Dim oInfo As CsrInfo

    oInfo = New CsrInfo With {
      .OrganizationUnit = "MyUnit",
      .Organization = "MyOrg",
      .CountryName = "MyCountry",
      .Locality = "MyTown",
      .State = "MyState"
    }

    oPrivateKey = KeyFactory.NewKey(KeyAlgorithm.RS256)
    oCertificateChain = Await Order.Generate(oInfo, oPrivateKey)
    oCertificate = GetSignedCertificate(oCertificateChain.Certificate.ToDer, oPrivateKey.ToDer, CityCode)

    Return oCertificate.ToResult
  End Function

  Private Shared Function GetSignedCertificate(Certificate As Byte(), PrivateKey As Byte(), Password As String) As X509Certificate2
    Dim oUnsignedCertificate As X509.X509Certificate
    Dim oSignedCertificate As X509Certificate2
    Dim oCertificateParser As X509CertificateParser
    Dim oCertificateEntry As X509CertificateEntry
    Dim oPrivateKey As PrivateKeyInfo
    Dim oParameter As AsymmetricKeyParameter
    Dim oKeyEntry As AsymmetricKeyEntry
    Dim oPfxStore As Pkcs12Store
    Dim sSubject As String
    Dim oRandom As SecureRandom
    Dim eFlags As X509KeyStorageFlags

    ' Prepare the private key
    oPrivateKey = PrivateKeyInfo.GetInstance(PrivateKey)
    oParameter = PrivateKeyFactory.CreateKey(oPrivateKey)
    oKeyEntry = New AsymmetricKeyEntry(oParameter)
    oRandom = New SecureRandom
    eFlags = X509KeyStorageFlags.Exportable Or X509KeyStorageFlags.PersistKeySet Or X509KeyStorageFlags.UserKeySet

    ' Convert to PKCS#12 format
    oCertificateParser = New X509CertificateParser
    oUnsignedCertificate = oCertificateParser.ReadCertificate(Certificate)
    oCertificateEntry = New X509CertificateEntry(oUnsignedCertificate)
    sSubject = oUnsignedCertificate.SubjectDN.ToString
    oPfxStore = New Pkcs12Store
    oPfxStore.SetCertificateEntry(sSubject, oCertificateEntry)
    oPfxStore.SetKeyEntry($"{sSubject}_key", oKeyEntry, {oCertificateEntry})

    Using oStream As New MemoryStream
      oPfxStore.Save(oStream, Password.ToCharArray, oRandom)
      oSignedCertificate = New X509Certificate2(oStream.ToArray, Password, eFlags)
    End Using

    Return oSignedCertificate
  End Function
End Class

问题根源 #

代码核心问题出在GetSignedCertificate方法中：通过Bouncy Castle的Pkcs12Store生成PFX时，私钥默认未标记为可导出。即使创建X509Certificate2时设置了X509KeyStorageFlags.Exportable，但PFX包内的私钥本身不具备可导出属性，导致导入证书存储后，系统仍会禁用导出选项。

解决方案 #

推荐两种修复方式，优先选择第一种（更简洁且避免Bouncy Castle的属性配置问题）：

方式一：直接使用Certes的密钥转换能力 #

Certes提供了直接将IKey转换为.NET原生RSA对象的方法，无需通过Bouncy Castle打包PFX，能直接控制私钥的可导出性。修改GenerateAsync方法如下：

Public Shared Async Function GenerateAsync(Order As IOrderContext, CityCode As String) As Task(Of Result(Of X509Certificate2))
    Dim oCertificateChain As CertificateChain
    Dim oCertificate As X509Certificate2
    Dim oPrivateKey As IKey
    Dim oInfo As CsrInfo

    oInfo = New CsrInfo With {
      .OrganizationUnit = "MyUnit",
      .Organization = "MyOrg",
      .CountryName = "MyCountry",
      .Locality = "MyTown",
      .State = "MyState"
    }

    oPrivateKey = KeyFactory.NewKey(KeyAlgorithm.RS256)
    oCertificateChain = Await Order.Generate(oInfo, oPrivateKey)
    
    ' 将Certes私钥转换为.NET原生RSA对象
    Dim rsa As RSA = oPrivateKey.ToRSA()
    ' 加载证书字节
    Dim certBytes = oCertificateChain.Certificate.ToDer()
    Dim tempCert = New X509Certificate2(certBytes)
    ' 关联私钥并创建可导出的证书实例
    oCertificate = tempCert.CopyWithPrivateKey(rsa)
    ' 重新导出为PFX并加载，确保密钥持久化属性生效
    Dim pfxBytes = oCertificate.Export(X509ContentType.Pfx, CityCode)
    oCertificate = New X509Certificate2(pfxBytes, CityCode, X509KeyStorageFlags.Exportable Or X509KeyStorageFlags.PersistKeySet Or X509KeyStorageFlags.UserKeySet)

    Return oCertificate.ToResult
End Function

方式二：修复Bouncy Castle的PFX生成逻辑 #

如果必须保留Bouncy Castle的实现，需要在创建AsymmetricKeyEntry时显式添加可导出属性。修改GetSignedCertificate方法中的私钥处理部分：

' Prepare the private key
oPrivateKey = PrivateKeyInfo.GetInstance(PrivateKey)
oParameter = PrivateKeyFactory.CreateKey(oPrivateKey)
' 添加可导出属性标记
Dim attributes As New List(Of Asn1Encodable)()
attributes.Add(New DerBmpString("Exportable"))
' 使用带属性的KeyEntry
oKeyEntry = New AsymmetricKeyEntry(oParameter, attributes.ToArray())
oRandom = New SecureRandom
eFlags = X509KeyStorageFlags.Exportable Or X509KeyStorageFlags.PersistKeySet Or X509KeyStorageFlags.UserKeySet

验证 #

修改后重新生成并导入证书，打开CurrentUser的"个人"证书存储，查看证书属性时，"导出私钥"选项将不再被禁用。

内容的提问来源于stack exchange，提问作者InteXX