From c9a3513031dc9b8dc668108a431dac4580c9cb39 Mon Sep 17 00:00:00 2001
From: maliming <malimings@gmail.com>
Date: Wed, 8 Jan 2025 17:28:03 +0800
Subject: [PATCH] Using `X509CertificateLoader` instead of `new
 X509Certificate2`.

Resolve #21839
---
 .../DependencyInjection/OpenIddictServerBuilderExtensions.cs  | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Microsoft/Extensions/DependencyInjection/OpenIddictServerBuilderExtensions.cs b/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Microsoft/Extensions/DependencyInjection/OpenIddictServerBuilderExtensions.cs
index 7ba0fc9340..046bde64eb 100644
--- a/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Microsoft/Extensions/DependencyInjection/OpenIddictServerBuilderExtensions.cs
+++ b/modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Microsoft/Extensions/DependencyInjection/OpenIddictServerBuilderExtensions.cs
@@ -13,8 +13,8 @@ public static class OpenIddictServerBuilderExtensions
         }
 
         var certificate = flag != null
-            ? new X509Certificate2(fileName, passPhrase, flag.Value)
-            : new X509Certificate2(fileName, passPhrase);
+            ? X509CertificateLoader.LoadPkcs12FromFile(fileName, passPhrase, flag.Value)
+            : X509CertificateLoader.LoadPkcs12FromFile(fileName, passPhrase);
 
         builder.AddSigningCertificate(certificate);
         builder.AddEncryptionCertificate(certificate);