using System;

using Amazon;

using Amazon.SecretsManager;

using Amazon.SecretsManager.Model;

using System.IO;

using System.Security.Cryptography.X509Certificates;

using System.Security.Cryptography;

​

public class Program

{

    public static byte[] streamToByteArray(Stream input)

    {

        MemoryStream ms = new MemoryStream();

        input.CopyTo(ms);

        return ms.ToArray();

    }

    public static void Main()

    {

        Console.WriteLine("Retrieving the P12 Certificate from Secrets Manager...");

        GetSecret("mybinarysecret");

        Console.WriteLine("Secret fetched from AWS Secret Manager");

    }

    public static void SaveData(string FileName, byte[] Data)

    {

        // This function is used to reconstruct the p12 certificate file from the byte array retrieved from the secret

        BinaryWriter Writer = null;

        string Name = FileName;

​

        try

        {

            // Create a new stream to write to the file

            Writer = new BinaryWriter(File.OpenWrite(Name));

​

            // Writer raw data                

            Writer.Write(Data);

            Writer.Flush();

            Writer.Close();

        }

        catch 

        {

            // Implement a fail safe

        }

        return;

    }

    public static void GetSecret(string secretName)

    {        

        IAmazonSecretsManager client = new AmazonSecretsManagerClient("AKIA4RS54YVF35CF6VTW", "JluSTT5Bv+y9BRXf8E7XEGBuS33pesr7eddZUaL0", RegionEndpoint.GetBySystemName("us-east-1")); //Edit this object initialization to your secrets region(eu-west-1) and your user's credentials

​

        GetSecretValueRequest request = new GetSecretValueRequest()

        {

            SecretId = secretName,

            VersionStage = "AWSCURRENT" // VersionStage defaults to AWSCURRENT if unspecified.

        };

        GetSecretValueResponse response = null;

        try

        {

            response = client.GetSecretValueAsync(request).Result;

        }

        catch (Exception e)

        {

            Console.WriteLine(e.Message);

        }

​

        // Convert this binary value(un-readable) to ByteArray and then to a MemoryStream

        var outputStream = new MemoryStream(response.SecretBinary.ToArray());

        // Converting the byte array to String to print(Can be trimmed out later post dev stage)

        var result = BitConverter.ToString(outputStream.ToArray());

        Console.WriteLine(result);

        // Writing the Certificate contents to a file

        SaveData("MyCertificate.p12",outputStream.ToArray());

        // To verify the file's contents, opening it as System.Security.Cryptography.X509Certificates object. Please note that the P12 certificate would contain a byte string which cannot be opened like a regular file.

        // Enter the Certificate's name & the passphrase to open it. Please replace "password@123" with your certificate

        X509Certificate2 certificate = new X509Certificate2("MyCertificate.p12", "badssl.com", X509KeyStorageFlags.MachineKeySet | X509KeyStorageFlags.Exportable);

        Console.WriteLine("Subject: {0}", certificate.Subject);

        return;

    }

}