@Domster：可以，但是您可能想通过检查证书哈希是否符合您的期望来加强安全性。因此，扩展版本看起来像这样（基于我们正在使用的一些实时代码）：
static readonly byte[] apiCertHash = { 0xZZ, 0xYY, ....};/// <summary>/// Somewhere in your application's startup/init sequence.../// </summary>void InitPhase(){ // Override automatic validation of SSL server certificates. ServicePointManager.ServerCertificatevalidationCallback =ValidateServerCertficate;}/// <summary>/// Validates the SSL server certificate./// </summary>/// <param name="sender">An object that contains state information for this/// validation.</param>/// <param name="cert">The certificate used to authenticate the remote party.</param>/// <param name="chain">The chain of certificate authorities associated with the/// remote certificate.</param>/// <param name="sslPolicyErrors">One or more errors associated with the remote/// certificate.</param>/// <returns>Returns a boolean value that determines whether the specified/// certificate is accepted for authentication; true to accept or false to/// reject.</returns>private static bool ValidateServerCertficate( object sender, X509Certificate cert, X509Chain chain, SslPolicyErrors sslPolicyErrors){ if (sslPolicyErrors == SslPolicyErrors.None) { // Good certificate. return true; } log.DebugFormat("SSL certificate error: {0}", sslPolicyErrors); bool certMatch = false; // Assume failure byte[] certHash = cert.GetCertHash(); if (certHash.Length == apiCertHash.Length) { certMatch = true; // Now assume success. for (int idx = 0; idx < certHash.Length; idx++) { if (certHash[idx] != apiCertHash[idx]) { certMatch = false; // No match break; } } } // Return true => allow unauthenticated server, // false => disallow unauthenticated server. return certMatch;}
