Re: [Ejbca-develop] (no subject)

[Tomas G. <to...@pr...>]

Hi Ivan,

This is a great place to ask. Parsing an end entity profile XML is a bit
tricky unfortunately, but others have proven it can be done :-)

The XML is a direct representation of the internal format, so no human
readable formatting done.

This part from the javadoc should help you. Unless you use Java, then
you can simply load the XML into an EndEntity class that you can find in
EJBCA.


-----
 * The algorithm for constants in the EndEntityProfile is:
 * Values are stored as 100*parameternumber+parameter, so the first
COMMONNAME value is 105, the second 205 etc.
 * Use flags are stored as 10000+100*parameternumber+parameter, so the
first USE_COMMONNAME value is 10105, the second 10205 etc.
 * Required flags are stored as 20000+100*parameternumber+parameter, so
the first REQUIRED_COMMONNAME value is 20105, the second 20205 etc.
 * Modifyable flags are stored as 30000+100*parameternumber+parameter,
so the first MODIFYABLE_COMMONNAME value is 30105, the second 30205 etc.
 *
 * Parsing an exported End Entity Profile XML:
 * In the EndEntityProfile XML there is for example a field
SUBJECTDNFIELDORDER which contains the defined DN components.
 * The algorithm is:
 * 100*parameter + size
 *
 * So for example if SUBJECTDNFIELDORDER contains the two values "500,
1100" this means there is one CN and one OU.
 * Numbers are defined in src/java/profilemappings.properties and CN=5
and OU=11, so 100*5+0 = 500 and 100*11+0 = 1100.
 * If there would be two OU fields there would also be one 1101
(100*11+1) in the SUBJECTDNFIELDORDER.
 *
 * You can see if the first CN field is required by finding a key in the
XML with the formula:
 * 20000+100*0+5 = 20005
 * if the value of this key is true, the first CN field is required and
not optional.
 * etc, for the second CN field (if there was a second one in
SUBJECTDNFIELDORDER) it would be 20000+100*1+5.
-----

Regards,
Tomas
-----
Save time and money with an Enterprise support subscription. Please see
www.primekey.se for more information.
https://www.primekey.se/technologies/products-overview/
https://www.primekey.se/service-support/support/

On 2016-05-09 09:10, Ivan R wrote:
> Hi,
> I get an end entity profile xml using the WSs and want to parse it in
> order to create a similar form to the one on the site elsewhere. I've
> looked around however I couldn't find documentation on how to do that.
> Any useful links or tips?
> 
> Sorry if this isn't the place to ask and thanks in advance.
> 
> Best Regards,
> Ivan
> 
> 
> ------------------------------------------------------------------------------
> Find and fix application performance issues faster with Applications Manager
> Applications Manager provides deep performance insights into multiple tiers of
> your business applications. It resolves application problems quickly and
> reduces your MTTR. Get your free trial!
> https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>