Re: Addtion of userCertificate in LDAP.

[Michael Ströder <michael@stroeder.com>]

Salvador Ramirez wrote:
> 
> On Sun, 8 Oct 2000 Hugo.van.der.Kooij@caiw.nl wrote:
> > On Sun, 8 Oct 2000, Vimalan.G wrote:
> >
> > > I want to add the userCertificate in LDAP.
> >
> > Why not let the application do this itself? (Which is what is the
> > procedure with netscape settings.)
> 
> Thanks for clarify this to me also about netscape.
> But then, what the attribute userCertificate was defined for?

There's a difference between userCertificate and
userSMIMECertificate. userSMIMECertificate is a signed PKCS#7 blob
=> the private key is needed for creating the data stored in this
attribute.

userCertificate contains simply the BER- or DER-encoded X.509
certificate.

Ciao, Michael.