From: Rui M. <rmo...@wh...> - 2000-07-17 09:15:26
|
Hello. Sorry for introducing some noise in this but, anyone knows if there is a perl/ldap module that allows Apache to store Digital Certificates in LDAP ( Netscape Directory Services ) Thanks in advance Chris Ridd wrote: > On Thu, 13 Jul 2000 13:44:35 CDT, Mark Wilcox wrote: > > What you'll need to do is look into the openSSL stuff to parse this out > > for you. > > > > When you say you use Netscape, what do you > > mean? Communicator? PerLDAP? the command line tools? > > > > Mark > > Well, you could also try using Convert::ASN1 to pick apart the > certificate. If you can get the certificate (the binary value itself, > not a Base-64 encoding of it or anything) into $val, then the following > should print out something. > > use Convert::ASN1; > use Convert::ASN1::Debug; > > Convert::ASN1::asn_dump(&STDOUT, $val); > > To get more selective info from the cert you need to get Convert::ASN1 > to decode the value instead of just dumping it. To get that to happen > you need the ASN.1 definition of certificates - the canonical > definition is in a standard called X.509, but there are copies of the > definition in some RFCs - RFC 2459 being the first one I could find. > > Cheers, > > Chris -- Rui Monteiro WhatEverNet Computing, SA rmo...@wh... Praca de Alvalade, 6 - Piso 6 Phone: +351 21 7994200 1700 036 Lisboa - Portugal Fax: +351 21 7994242 http://www.whatevernet.pt |