Hi,

since 2002, we did some improvements to Norberts script, which he BTW wrote as our employee, e.g. we included some more extensions and we are currently working on a similiar script for CRLs. If you are interested, we could see to combine efforts.

Anyway I am very interested in your work and would be willing to do some tests.

Since the openca code now includes an abstraction layer API, it might be interesting to integrate the parser. But since this is only one of a lot more funktionality, it cannot be seen as the beginning of a replacement for OpenSSL. There are other canditates for that. But this question should be answered rather by the core developers, than by me anyway.

Cheers,

Peter

Mike Jackson wrote:

Hi,
I've put together a pure perl X.509 cert parser based on Norbert Klasen's original x509decode script which he contributed to Convert::ASN1 /contrib in 2002.


The parser is an OO perl module with 30 methods currently. It provides access methods such as:

$cert->subject_email
$cert->not_before
$cert->version
$cert->serial

The only dependency of the library is Convert::ASN1. It does not require OpenSSL at all.

Currently, it's only been tested with my own certs, so I'd like to get some more testers before releasing it publicly. I wrote a set of programs running in mod_perl to pull users account info, jpeg photo, and certs from LDAP and display them on a web page. The parser has worked perfectly for me, but I'm curious to see how it behaves with certs which were created from different profiles than mine.

 Anybody interested in testing and possibly using it in OpenCA?



--
_______________________________________________________________________

Peter Gietz (CEO)
DAASI International GmbH phone: +49 7071 2970336
Wilhelmstr. 106 Fax: +49 7071 295114 D-72074 T�bingen email: [EMAIL PROTECTED]
Germany Web: www.daasi.de


Directory Applications for Advanced Security and Information Management
_______________________________________________________________________



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
OpenCA-Devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to