It's true that it's not very well documented. The source gives some
hints, though. apps/apps.h:
#define DB_type 0
#define DB_exp_date 1
#define DB_rev_date 2
#define DB_serial 3 /* index - unique */
#define DB_file 4
#define DB_name 5 /* index - unique when active and not disabled
*/
Those are the field numbers. DB_rev_date is a field that's filled in
when the certificate is revoked. DB_exp_date is simply a copy of the
certificate's expiration date (ValidBefore). DB_name is a copy of the
certificate's subjet.
The only field that's truly unknown is DB_file. As far as I can see
from the source, it's never filled with anything else. The reason it
exists mostly lies in historical fog, unless someone who was more
active back when this was invented has further information.
Cheers,
Richard
In message <20090120022428.gb8...@atlantis> on Tue, 20 Jan 2009 00:24:28 -0200,
Andres Moreira <elkpich...@gmail.com> said:
elkpichico> Hi all,
elkpichico> I need to know the format of the index.txt file, becuase I have to
elkpichico> write on it from a python script. I was googling about it, but I
don't
elkpichico> find too much information.
elkpichico> The only things I found was that:
elkpichico>
elkpichico> Field1 Field2 Field3 Field4 Field5
elkpichico> <TYPE> <EXPDATE> <SERIAL> Unkown Unkown
elkpichico>
elkpichico> The fields 4 and 5 I don't know what they are.
elkpichico>
elkpichico> Also I found that type ares:
elkpichico> V - Valid
elkpichico> E - Expired
elkpichico> R - Revoked
elkpichico>
elkpichico> So I guess that the field EXPDATE is valid only for the Valid
type?
elkpichico> So when the database say Revokde, the EXPDATE is the revoked time
?
elkpichico> and when is Expired ?
elkpichico>
elkpichico> Thanks a lot if somebody can ask me some of the questions.
elkpichico> I really appreciate.
elkpichico>
elkpichico> Regards,
elkpichico> Andres.
--
Richard Levitte rich...@levitte.org
http://richard.levitte.org/
"Life is a tremendous celebration - and I'm invited!"
-- from a friend's blog, translated from Swedish
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majord...@openssl.org
