I am using the LDAP SDK's API to perform a client-based authentication
to a server in order to query the LDAP server.
It works fine; however, in order to authenticate the client to the
server, (note I cannot bind anonymously due to the setup of the server)
in calling
ldapssl_enable_clientauth( LDAP *ld, char *keynickname,
char *keypasswd, char *certnickname );
I must pass the "certnickname" parameter. This is the nickname in the
cert7.db file.
Since there can be many certificates, and I don't know which to pass to
the server, I want to parse the cert7.db file for the certificate
nicknames in order to pass/authenticate to the server in order to do my
queries.
So.. I got the NSS utilities which includes certutil. I thought I would
extract the code that parses out the nickname, but I note that the
certutil utility REQUIRES the secmod.db file, which does not exist on
the client.
------------------------------------------------------------------------------
(oops. That's not true. secmod.db IS there, and certutil does work.
As Emily Latella would say, "nevermind..")
Although it would be nice if there were a call that listed to a buffer parameter other than a FILE.
------------------------------------------------------------------------------


Thus, it seems I cannot get at the nicknames in the cert7.db file.
The only current way for me to do it, is to look for the nicknames in a
hex editor.
Anyone know how to parse for them???
TIA



_______________________________________________
mozilla-directory mailing list
[EMAIL PROTECTED]
http://mail.mozilla.org/listinfo/mozilla-directory

Reply via email to