.net Owin Twitter登录根据验证程序远程证书无效

多亏了开源的力量，我们可以看到Twitter证书的 fingerprint 已经编码到了Katana项目中.

Microsoft.Owin.Security.Twitter.TwitterAuthenticationOptions

最近一些证书肯定已经更改，现在 fingerprint 不再匹配.

请将"VeriSign Class 3 Public Primary Certification Authority-G5"证书的新 fingerprint 添加到您Startup.Auth.cs(MVC用户)的Twitter认证选项中.

更改默认设置:

app.UseTwitterAuthentication(
    consumerKey: "XXXX",
    consumerSecret: "XXX"
);

使用这个:

app.UseTwitterAuthentication(new TwitterAuthenticationOptions
{
    ConsumerKey = "XXXX",
    ConsumerSecret = "XXXX",
    BackchannelCertificateValidator = new CertificateSubjectKeyIdentifierValidator(new[]
    {
        "A5EF0B11CEC04103A34A659048B21CE0572D7D47", // VeriSign Class 3 Secure Server CA - G2
        "0D445C165344C1827E1D20AB25F40163D8BE79A5", // VeriSign Class 3 Secure Server CA - G3
        "7FD365A7C2DDECBBF03009F34339FA02AF333133", // VeriSign Class 3 Public Primary Certification Authority - G5
        "39A55D933676616E73A761DFA16A7E59CDE66FAD", // Symantec Class 3 Secure Server CA - G4
        "5168FF90AF0207753CCCD9656462A212B859723B", //DigiCert SHA2 High Assurance Server C‎A 
        "B13EC36903F8BF4701D498261A0802EF63642BC3" //DigiCert High Assurance EV Root CA
    })
});