From 836dae756fee7b5a8855a2e3f49b514e41031f43 Mon Sep 17 00:00:00 2001
From: Paul Schneider <paulschneider@free.fr>
Date: Wed, 11 Jun 2025 01:14:51 +0100
Subject: [PATCH] a better behavior

---
 src/Yavsc/Extensions/HostingExtensions.cs | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

diff --git a/src/Yavsc/Extensions/HostingExtensions.cs b/src/Yavsc/Extensions/HostingExtensions.cs
index a03a05f7..f5e0fe52 100644
--- a/src/Yavsc/Extensions/HostingExtensions.cs
+++ b/src/Yavsc/Extensions/HostingExtensions.cs
@@ -300,10 +300,12 @@ public static class HostingExtensions
         }
         else
         {
-            var key = builder.Configuration["YavscSigningCert"];
-            Debug.Assert(key != null);
-            var pfxBytes = Convert.FromBase64String(key);
-            var cert = new X509Certificate2(pfxBytes, (string)null, X509KeyStorageFlags.MachineKeySet);
+            var path = builder.Configuration["Kestrel:Endpoints:Https:KeyPath"];
+            var pass = builder.Configuration["Kestrel:Endpoints:Https:Password"];
+            Debug.Assert(path != null);
+            FileInfo certFileInfo = new FileInfo(path);
+            Debug.Assert(certFileInfo.Exists);
+            var cert = new X509Certificate2(path, pass);
             identityServerBuilder.AddSigningCredential(cert);
         }
         return identityServerBuilder;