[Date Prev][Date Next] [Chronological] [Thread] [Top]

AW: Certificate stored as binary??



Hi,

OpenLDAP does store the whole x.509 certificate as a binary value. But try
   "userCertificate;binary:< file:///home/user/cert.der" or omit the "file:"
at all
   "userCertificate;binary: </home/user/cert.der"

As I understand it, OpenLDAP stores the cert binary, but (normally)
ldapsearch returns it base64 encoded. To get the binary certificate, I have
to use the ldapsearch option "-t" .

   BTW: Has anybody experience with using php scripts on binary LDAP values,
especially with usercertificate;binary? If I do a php ldapsearch on a
certificate, the returned binary certificate is truncated in the variable. I
suppose, it´s because some new-line chars that are in the binary
certificate...

Kind regards,
Gerhard Duile


-----Ursprüngliche Nachricht-----
Von: Lui Yeok Peng [mailto:ypenglui@hotmail.com]
Gesendet: Freitag, 18. Januar 2002 05:48
An: openldap-software@OpenLDAP.org
Betreff: Certificate stored as binary??


hi,
       is it OpenLDAP will store the whole x.509 certificate as binary?
or just the path name which has been encoded? This is because when i use
file inclusion format like
        "userCertificate;binary: < file:/home/user/cert.der"
and it just show me one line regarding the certificate which has been 
encoded. i wonder if i have doing something wrong, can anybody help me?
        If the certificate is really stored as binary, is it the responsible

by the OpenLDAP or client side to decode it?
        thanks!

_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com