Использование signtool c Рутокен ЭЦП 3.0 с не экспортируемым сертифика (Страница 9 из 13)

using System;
using System.IO;
using System.Security.Cryptography;
using System.Security.Cryptography.X509Certificates;

namespace TestSignDigest
{
    internal class Program
    {
        static void Main(string[] args)
        {
            if (args.Length < 2)
            {
                Console.WriteLine("Usage: TestSignDigest <digest_file.dig> <cert_thumbprint>");
                return;
            }

            try
            {
                var digestBytes = Convert.FromBase64String(File.ReadAllText(args[0]));

                using (var store = new X509Store(StoreName.My, StoreLocation.CurrentUser))
                {
                    store.Open(OpenFlags.ReadOnly | OpenFlags.OpenExistingOnly);

                    var certs = store.Certificates.Find(X509FindType.FindByThumbprint, args[1], true);
                    if (certs.Count > 0)
                    {
                        var rsa = (RSACryptoServiceProvider)certs[0].PrivateKey;
                        var signatureBytes = rsa.SignHash(digestBytes, CryptoConfig.MapNameToOID("SHA256"));
                        if (signatureBytes != null)
                        {
                            var signatureString = Convert.ToBase64String(signatureBytes);
                            if (!string.IsNullOrEmpty(signatureString))
                            {
                                Console.WriteLine(signatureString);

                                File.WriteAllText(args[0] + ".signed", signatureString);
                            }
                        }
                    }
                }
            }
            catch (Exception ex)
            {
                Console.WriteLine(ex);
            }
        }
    }
}