Merge pull request #20705 from abpframework/AddProductionEncryptionAndSigningCertificate

Add optional X509KeyStorageFlags parameter to `AddProductionEncryptionAndSigningCertificate`.

modules/openiddict/src/Volo.Abp.OpenIddict.AspNetCore/Microsoft/Extensions/DependencyInjection/OpenIddictServerBuilderExtensions.cs

@@ -5,14 +5,17 @@ namespace Microsoft.Extensions.DependencyInjection;
 
 public static class OpenIddictServerBuilderExtensions
 {
-    public static OpenIddictServerBuilder AddProductionEncryptionAndSigningCertificate(this OpenIddictServerBuilder builder, string fileName, string passPhrase)
+    public static OpenIddictServerBuilder AddProductionEncryptionAndSigningCertificate(this OpenIddictServerBuilder builder, string fileName, string passPhrase, X509KeyStorageFlags? flag = null)
     {
         if (!File.Exists(fileName))
         {
             throw new FileNotFoundException($"Signing Certificate couldn't found: {fileName}");
         }
 
-        var certificate = new X509Certificate2(fileName, passPhrase);
+        var certificate = flag != null
+            ? new X509Certificate2(fileName, passPhrase, flag.Value)
+            : new X509Certificate2(fileName, passPhrase);
+
         builder.AddSigningCertificate(certificate);
         builder.AddEncryptionCertificate(certificate);
         return builder;