Chris Ridd wrote:

> I expect the OpenLDAP guys have some useful DN code which could be
> incorporated (even just linked against.)

I don't know, LDAP itself uses DNs as strings.  However, the ldapd
server translates LDAP from/into DAP and has to do the thing in both
directions.  The code itself is in servers/ldap/syntax.c, but I have
never tried it.  Look for ldap_dn2str() and encode_dn().  That part
of the code is not under active maintenance and it may be broken,
especially w.r.t. to quotation/escape rules.

In general, parsing of LDAP-syntax DNs is more likely to be correct
through the use of ldap_explode_dn() and ldap_explode_rdn(), since
those are under active maintenance.

Anyway, I'd also like to have an easy way to extract LDAP-syntax
DNs from certificates.

Julio
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to