Runtime: Call keychain APIs using .NetCore on macOS
How I may call Keychail APIs using .Net Core on MacOs. Any help please.
I have looked into the following issues, but did not getting it. Thanks
https://github.com/dotnet/corefx/pull/16588
MuhammadAliYousaf
All 8 comments
How I may call Keychail APIs using .Net Core on MacOs.
There are no APIs in .NET Core that directly expose / that map 1:1 with Keychain. If you need to access such APIs directly, you would need to write your own P/Invokes, or find a library that's already done it.
stephentoub
on 27 May 2019
Closing as answered.
karelz
on 30 May 2019
Do .Net core gives any support to create asymmetric keys? like Ecdsa. And we want to save them in key chain so that later on we can retrieve them for further use. As you have stated in this link that, from v2.0, you are using Apple Security Framework on macOS.
We have implemented it on Windows using CNG Nuget, but unable to find on MacOS.
Please advice.
MuhammadAliYousaf
on 30 May 2019
Did you look at our crypto APIs in System.Security namespace?
@bartonjs @krwq may be able to tell more
BTW: You may want to create new issue if @bartonjs does not answer ... in general we do not monitor closed issues and this is somewhat different question than the original one.
karelz
on 30 May 2019
Yes I have looked into System.Security namespace, but unable to find required APIs.
I will wait for @bartonjs & @krwq response, otherwise I will create a new thread.
MuhammadAliYousaf
on 30 May 2019
Keys can be created (e.g. ECDsa.Create()), but not persisted into a keychain. The only way to persist a key into a keychain is by having it paired to a certificate in a PFX/PKCS#12 file and then importing it with X509KeyStorageFlags.PersistKeySet (that'll import the cert and key into the default keychain).
bartonjs
on 30 May 2019
Actually, you can do it easier by just adding the cert (with a paired key) to new X509Store(StoreName.My, StoreLocation.CurrentUser, OpenFlags.ReadWrite), that's also the default keychain.
But you can't open a macOS key by identifier, or save a key with a controlled identifier.
bartonjs
on 30 May 2019
It's working. Thanks.
MuhammadAliYousaf
on 20 Jun 2019
Related issues
yahorsi
路
3Comments
omariom
路
3Comments
aggieben
路
3Comments
v0l
路
3Comments
EgorBo
路
3Comments
Most helpful comment
Actually, you can do it easier by just adding the cert (with a paired key) to
new X509Store(StoreName.My, StoreLocation.CurrentUser, OpenFlags.ReadWrite), that's also the default keychain.But you can't open a macOS key by identifier, or save a key with a controlled identifier.