[dev-crypto-csharp] Certificate store for cross platform designs

[Sid Shetye]

Hi folks,

 

Although we do use BC for some crypto stuff, we haven't explored anything
beyond the standard Windows cert store for certificate storage. So at
present we use the Windows certificate store as:

 

    var store = new X509Store(StoreName.My, StoreLocation.LocalMachine);

    store.Open(OpenFlags.OpenExistingOnly | OpenFlags.ReadOnly);

    var certs = store.Certificates.Find(X509FindType.FindBySubjectName,
subjectName, true);

 

We'd like to switch to something that's more cross platform (esp Linux
compatible). What are some good design patterns for a secure, cross platform
certificate storage? We need to store RSA and EC certificates as well as
their respective private keys (if they exist in the password protected PFX).

 

Regards

Sid