加载P12证书时遇CryptographicException：未知私钥格式问题求助

问题背景 #

在Debian系统上使用Certbot生成的Let's Encrypt子域名证书可正常提供SSL服务，为适配WebSocket，通过以下命令将证书转换为PKCS12格式：

openssl pkcs12 -export -in fullchain.pem -inkey privkey.pem -out certificate.p12

但在Unity的Mono环境下，用C#代码加载该.p12文件时，抛出CryptographicException: Unknown private key format错误。

加载证书的C#代码 #

private X509Certificate2 GetCertificate(string certificateName, string certificatePassword)
{
    if (certificateName == null || certificatePassword == null) return null;

    var certificates = Directory.GetFiles(
        Environment.CurrentDirectory, 
        certificateName, 
        SearchOption.AllDirectories
    );

    var certificatePath = certificates.First(path => path.EndsWith(certificateName));
    
    return certificatePath != null ? new X509Certificate2(certificatePath, certificatePassword) : null;
}

错误堆栈信息 #

CryptographicException: Unknown private key format
  at Mono.Security.X509.PKCS12.AddPrivateKey (Mono.Security.Cryptography.PKCS8+PrivateKeyInfo pki) [0x0006c] in <fed5abf356e4410f878747dcbee46084>:0
  at Mono.Security.X509.PKCS12.ReadSafeBag (Mono.Security.ASN1 safeBag) [0x000e5] in <fed5abf356e4410f878747dcbee46084>:0
  at Mono.Security.X509.PKCS12.Decode (System.Byte[] data) [0x00242] in <fed5abf356e4410f878747dcbee46084>:0
  at Mono.Security.X509.PKCS12..ctor (System.Byte[] data, System.String password) [0x0000d] in <fed5abf356e4410f878747dcbee46084>:0
  at System.Security.Cryptography.X509Certificates.X509Certificate2ImplMono.ImportPkcs12 (System.Byte[] rawData, System.String password) [0x00023] in <0f3a92f18c3f4515965ea9093114785a>:0
  at System.Security.Cryptography.X509Certificates.X509Certificate2ImplMono.ImportPkcs12 (System.Byte[] rawData, Microsoft.Win32.SafeHandles.SafePasswordHandle password) [0x0001b] in <0f3a92f18c3f4515965ea9093114785a>:0
  at System.Security.Cryptography.X509Certificates.X509Certificate2ImplMono..ctor (System.Byte[] rawData, Microsoft.Win32.SafeHandles.SafePasswordHandle password, System.Security.Cryptography.X509Certificates.X509KeyStorageFlags keyStorageFlags) [0x0002f] in <0f3a92f18c3f4515965ea9093114785a>:0
  at Mono.X509PalImpl.ImportFallback (System.Byte[] data, Microsoft.Win32.SafeHandles.SafePasswordHandle password, System.Security.Cryptography.X509Certificates.X509KeyStorageFlags keyStorageFlags) [0x00000] in <0f3a92f18c3f4515965ea9093114785a>:0
  at Mono.X509PalImplMono.Import (System.Byte[] data, Microsoft.Win32.SafeHandles.SafePasswordHandle password, System.Security.Cryptography.X509Certificates.X509KeyStorageFlags keyStorageFlags) [0x00000] in <0f3a92f18c3f4515965ea9093114785a>:0
  at Mono.SystemCertificateProvider.Import (System.Byte[] data, Microsoft.Win32.SafeHandles.SafePasswordHandle password, System.Security.Cryptography.X509Certificates.X509KeyStorageFlags keyStorageFlags, Mono.CertificateImportFlags importFlags) [0x00017] in <0f3a92f18c3f4515965ea9093114785a>:0
  at Mono.SystemCertificateProvider.Mono.ISystemCertificateProvider.Import (System.Byte[] data, Microsoft.Win32.SafeHandles.SafePasswordHandle password, System.Security.Cryptography.X509Certificates.X509KeyStorageFlags keyStorageFlags, Mono.CertificateImportFlags importFlags) [0x00000] in <0f3a92f18c3f4515965ea9093114785a>:0
  at System.Security.Cryptography.X509Certificates.X509Helper.Import (System.Byte[] rawData, Microsoft.Win32.SafeHandles.SafePasswordHandle password, System.Security.Cryptography.X509Certificates.X509KeyStorageFlags keyStorageFlags) [0x00005] in <131fc96242a743e6b00bc8a8663638a3>:0
  at System.Security.Cryptography.X509Certificates.X509Certificate..ctor (System.String fileName, System.String password, System.Security.Cryptography.X509Certificates.X509KeyStorageFlags keyStorageFlags) [0x0003e] in <131fc96242a743e6b00bc8a8663638a3>:0
  at System.Security.Cryptography.X509Certificates.X509Certificate..ctor (System.String fileName, System.String password) [0x00000] in <131fc96242a743e6b00bc8a8663638a3>:0
  at System.Security.Cryptography.X509Certificates.X509Certificate2..ctor (System.String fileName, System.String password) [0x00000] in <0f3a92f18c3f4515965ea9093114785a>:0
  at WebSocketListener.WebSocketNetworkListener.GetCertificate (System.String certificateName, System.String certificatePassword) [0x0004b] in C:\Users\Joe\Desktop\Work\unity\Vamps\GameEngine\Assets\Networking\WebGL\WebSocketNetworkListener.cs:133
  at WebSocketListener.WebSocketNetworkListener..ctor (DarkRift.Server.NetworkListenerLoadData pluginLoadData) [0x00014] in C:\Users\Joe\Desktop\Work\unity\Vamps\GameEngine\Assets\Networking\WebGL\WebSocketNetworkListener.cs:26
  at (wrapper managed-to-native) System.Reflection.RuntimeConstructorInfo.InternalInvoke(System.Reflection.RuntimeConstructorInfo,object,object[],System.Exception&)

解决方案 #

1. 重新生成兼容Mono的PKCS12证书 #

Let's Encrypt默认使用EC密钥，旧版Mono对EC密钥的PKCS12解析支持有限。添加-legacy参数重新生成证书，使用旧加密算法兼容Mono：

openssl pkcs12 -export -in fullchain.pem -inkey privkey.pem -out certificate.p12 -legacy

2. 修改C#加载代码，指定密钥存储标志 #

实例化X509Certificate2时添加密钥存储参数，避免Mono处理密钥时的权限或格式问题：

return certificatePath != null ? new X509Certificate2(
    certificatePath, 
    certificatePassword, 
    X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.PersistKeySet | X509KeyStorageFlags.Exportable
) : null;

3. 验证PKCS12文件完整性 #

用openssl检查生成的.p12文件是否有效，输入密码后能正常显示证书和密钥信息则说明文件无问题：

openssl pkcs12 -info -in certificate.p12

内容的提问来源于stack exchange，提问作者Apexes