我需要自動創(chuàng)建 Azure Batch 帳戶。其中一部分是從現(xiàn)有 Azure 密鑰保管庫向帳戶添加證書。我想我擁有我需要的所有部件，但我無法將它們?nèi)拷M合在一起；我有一個KeyVault.Models.CertificateBundle對象和一個Management.Batch.Models.BatchAccount對象，但我不確定如何讓一個對象進(jìn)入另一個對象。我的代碼如下所示：// Create Batch accountvar storageAccount = new Models.AutoStorageBaseProperties(storageAccountId);mgmtClient.BatchAccount.Create(resourceGroupName, accountName, new Models.BatchAccountCreateParameters() { Location = clusterZone, AutoStorage = storageAccount });string certName;Models.CertificateCreateOrUpdateParameters certParams;// Add certificateusing (KeyVaultClient kvClient = new KeyVaultClient(new KeyVaultClient.AuthenticationCallback(GetKeyVaultToken))){ var cert = kvClient.GetCertificateAsync(certId).GetAwaiter().GetResult(); string thumbprint = Convert.ToBase64String(cert.X509Thumbprint); string cer = Convert.ToBase64String(cert.Cer); certParams = new Models.CertificateCreateOrUpdateParameters(Convert.ToBase64String(cert.Cer), cert.Id, thumbprint: thumbprint, format: Models.CertificateFormat.Cer, type: cert.ContentType); certName = $"SHA1-{thumbprint}"; // not sure about this one}// failing with a complaint about the cert namemgmtClient.Certificate.Create(resourceGroupName, accountName, certName, certParams);我使用此代碼得到的確切錯誤是：'certificateName' does not match expected pattern '^[\\w]+-[\\w]+$'.certName看起來像SHA1-XXXXXXXXXXXXXXXXXXXXXX+XXXX=。指紋中有一些非字母數(shù)字字符。我只是猜測這是 SHA1，但除此之外，這個名字對我來說很合適。我不確定我錯過了什么。我也很樂意接受某人對這個特定問題的更簡單的解決方案。
1 回答
慕斯709654
TA貢獻(xiàn)1840條經(jīng)驗 獲得超5個贊
'certificateName' 與預(yù)期的模式 '^[\w]+-[\w]+$' 不匹配。
您可以調(diào)試代碼并檢查 Azure 密鑰庫中的指紋。在您的代碼中，您從代碼中獲得的指紋與認(rèn)證指紋不同。我使用以下代碼獲得了認(rèn)證指紋。
X509Certificate2 x509 = new X509Certificate2();
x509.Import(cert.Cer);
var thumbprint = x509.Thumbprint;
下面是我用來將證書添加到 Azure 批處理帳戶的演示代碼。
var credentials = SdkContext.AzureCredentialsFactory.FromFile(@"cred file path");
var resourceGroup = "resourceGroup";
var accountName = "batchAccountName";
var subscriptionId = "subscriptionName";
var certificateIdentifier = "https://keyvaultName.vault.azure.net/certificates/certName/xxxxx";
var batchManagementClient = new BatchManagementClient(credentials)
{
SubscriptionId = subscriptionId
};
var azureServiceTokenProvider = new AzureServiceTokenProvider();
var keyVaultClient =
new KeyVaultClient(
new KeyVaultClient.AuthenticationCallback(azureServiceTokenProvider.KeyVaultTokenCallback));
var cert = keyVaultClient.GetCertificateAsync(certificateIdentifier).Result;
X509Certificate2 x509 = new X509Certificate2();
x509.Import(cert.Cer);
var thumbprint = x509.Thumbprint;
var certConent = Convert.ToBase64String(cert.Cer);
var certName = $"SHA1-{thumbprint}";
var result= batchManagementClient.Certificate.CreateAsync(resourceGroup, accountName, certName, new CertificateCreateOrUpdateParametersInner
{
Thumbprint = thumbprint,
Data = certConent,
ThumbprintAlgorithm = "SHA1",
Format = CertificateFormat.Cer,
}).Result;
測試結(jié)果：
- 1 回答
- 0 關(guān)注
- 161 瀏覽
添加回答
舉報
0/150
提交
取消