Re: Question regarding Digital Certificates in LDAP

[Chris R. <Chr...@me...>]

On Thu, 13 Jul 2000 13:44:35 CDT, Mark Wilcox wrote:
> What you'll need to do is look into the openSSL stuff to parse this out
> for you.
> 
> When you say you use Netscape, what do you
> mean? Communicator? PerLDAP? the command line tools?
> 
> Mark

Well, you could also try using Convert::ASN1 to pick apart the 
certificate. If you can get the certificate (the binary value itself, 
not a Base-64 encoding of it or anything) into $val, then the following 
should print out something.

use Convert::ASN1;
use Convert::ASN1::Debug;

Convert::ASN1::asn_dump(&STDOUT, $val);

To get more selective info from the cert you need to get Convert::ASN1 
to decode the value instead of just dumping it. To get that to happen 
you need the ASN.1 definition of certificates - the canonical 
definition is in a standard called X.509, but there are copies of the 
definition in some RFCs - RFC 2459 being the first one I could find.

Cheers,

Chris