Re: userSMIMEcertificate outlook/netscape

["Oliver Bode" <oliver@x509security.com>]

I don't think I can use the usercertificate attribute. And I couldn't find
the ldif tool either. I tried using openssl to convert the der certificate
to base 64, then I stripped all newlines before inserting it in the ldif
file, but nothing worked. There is also a note somewhere about using a
content type header that you leave blank - what's that all about. Can you
send me your ldif file that you uploaded to make this happen.

> Hi,
>
> Iam using Outlook/Express too. I dont use the attribute
> userSMIMEcertificate, but I distribute
> public SMIME certs with ldap too. At this time ive got only 2 Certs, that
i
> created
> by myself.
> Try the attribute usercertificate. I am using the DER Form and it runs
both,
> netscape and
> Outlook Express.
> All this stuff needs more than 4 hours of headache. First I couldnt find
the
> "ldif tool", so
> I had to write a little perl script, which needs the most of the time. (
> coding Der to BASE64 )
> After this ive loaded the so created LDIF File into the openldap server.
> ....
>
> Hope to help you a little bit,
>
> Thomas Heil
> Email: thomasheil@ba-glauchau.de
>
>
>
>
> ----- Original Message -----
> From: "Oliver Bode" <oliver@x509security.com>
> To: <openldap-software@OpenLDAP.org>
> Sent: Tuesday, April 09, 2002 5:58 PM
> Subject: userSMIMEcertificate outlook/netscape
>
>
> > Hi,
> >
> > I've been trying to figure this out all day...
> >
> > Has anyone managed to:
> >
> > 1. Use the Outlook/Express addressbook to retrieve peoples
> > userSMIMEcertificate from an openldap directory server.
> >
> > 2.  Use the security>people>search directory in Netscape to do the same
> > thing.
> >
> > If it is possible to do any of these things can someone point me to a
page
> > that explains it. I already tried
> >
http://www.linuxdoc.org/HOWTO/LDAP-Implementation-HOWTO/certificates.html
> > but this didn't achieve the above for me.
> >
> > Thanks,
> >
> > Oliver
> >
>