Mike, because our application needs to create and validate certificates, openssl is a great tool to do that.
Another option for you is certman custom tags. This custom tags display certificate dates. Do you can download this great tool here and study his routines: http://certman.riaforge.org/ Cheers Marco Antonio On Mon, Jul 28, 2008 at 11:09 AM, Mike Henry <[EMAIL PROTECTED]> wrote: > Thanks for the reply... Are you using this to validate Client > Certificates? On the server, I don't have access to the "PEM" file for the > client cert. In addition, I don't think I want to run a batch process from > a web transaction. > > Can I implicitly trust IIS (or any webserver) to validate the date for the > certificate? My client wants to add an additional level of validation on > the application server. They provided the following example from .NET: > > session("PK_Expire_Date")=Request.ClientCertificate("ValidUntil") > > Is there a way to get to the client cert ValidUntil date in Coldfusion? > > > > >I'm using openssl to do this task. > >After download openSSL(http://www.openssl.org/related/binaries.html) our > CF > >application runs a bat with this command: > > > >openssl x509 -in %path2PEMfile% -noout -enddate > > > >Cheers > >Marco Antonio > > > > > >On Thu, Jul 24, 2008 at 3:44 PM, Mike Henry <[EMAIL PROTECTED]> wrote: > > > >> > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Adobe® ColdFusion® 8 software 8 is the most important and dramatic release to date Get the Free Trial http://ad.doubleclick.net/clk;203748912;27390454;j Archive: http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:309795 Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4
