如何在服务器和客户端的SslStream中进行身份验证。

1. 在服务器端：

X509Certificate2 serverCert = new X509Certificate2("serverCert.pfx", "password");
SslTcpListener listener = new SslTcpListener(serverCert);
listener.Start();

...

public class SslTcpListener
{
    private readonly X509Certificate2 _certificate;

    public SslTcpListener(X509Certificate2 certificate)
    {
        _certificate = certificate;
    }

    public void Start()
    {
        TcpListener tcpListener = new TcpListener(IPAddress.Any, 1234);
        tcpListener.Start();
        while (true)
        {
            TcpClient tcpClient = tcpListener.AcceptTcpClient();

            ThreadPool.QueueUserWorkItem(new WaitCallback(HandleClient), tcpClient);
        }
    }

    private void HandleClient(object state)
    {
        TcpClient tcpClient = (TcpClient)state;

        try
        {
            SslStream sslStream = new SslStream(tcpClient.GetStream(), false);
            sslStream.AuthenticateAsServer(_certificate, false, SslProtocols.Tls, true);
            //身份验证成功后，可以在此处进行数据的读取与写入
        }
        catch (AuthenticationException e)
        {
            Console.WriteLine(e.ToString());
            tcpClient.Close();
            return;
        }

    }
}

2. 在客户端：

X509Certificate2 clientCert = new X509Certificate2("clientCert.pfx", "password");
TcpClient client = new TcpClient("localhost", 1234);

...

try
{
    SslStream sslStream = new SslStream(client.GetStream(), false, ValidateServerCertificate);
    sslStream.AuthenticateAsClient("localhost", new X509Certificate2Collection(clientCert), SslProtocols.Tls, true);
    //身份验证成功后，可以在此处进行数据的读取与写入
}
catch (AuthenticationException e)
{
    Console.WriteLine(e.ToString());
    client.Close();
    return;
}

...

private static bool ValidateServerCertificate(object sender, X509Certificate certificate, X509Chain chain, SslPolicyErrors sslPolicyErrors)
{
    //验证服务器端证书的有效性
    return true;
}