Re: x.509 cert

[Mark W. <mew...@un...>]

You can pull the cert from LDAP pretty easily:
....
my $certs = $ldap->get("usercertificate;binary"); #i'm assuming you're doing LDAP 3 here

After you have the cert, you'll need to parse it out using openSSL. There's some modules on CPAN that might make this easier or you can also get them at www.openca.org.

They simply are wrappers around the openSSL command line tool.

Mark




Eric Nichols wrote:

> I've seen a bunch of e-mails related to ASN1 stuff.  Can anyone give me a plain jane way of reading the information on an X.509 public key pulled from an LDAP server?  I'd like to find out as much information I can about who the key is for (e-mail address) who generated it, etc.. All of the usefull info.  Is there a FAQ out there?