--- On Wed, 1/27/10, George Niculae <[email protected]> wrote:
> > > Ideally, we would only allow the download of our
> own
> > private CA, since
> > > we really have no business being a source for
> ones
> > that belong to
> > > someone else, but the potential for added
> complexity
> > is too high, so
> > > just make them all links.
> >
> > There is already a validation in place for
> certificate
> > delete
> > operation.
>
> An alternative to this validation could be to check the
> issuer of the certificate using
> javax.security.cert.X509Certificate.getIssuerDN.
>
While trying to retrieve the issuer DN for my own sipx signed certificate (X509
v3) using java.security.cert.X509Certificate I hit a
java.security.cert.CertificateParsingException: invalid DER-encoded certificate
data
exception.
Same code works just fine for other certificates like
Equifax_Secure_Certificate_Authority.crt (X509 v3) or verisignclass3ca.crt
(X509 v1).
After editing my own certificate and removing all the lines before "-----BEGIN
CERTIFICATE-----" line I managed to retrieve the issuer.
Doing a quick search - I found that OpenSSL adds some human-readable info about
certificate when signing and this could cause some problems like the one I hit.
Not sure if this is the way it suppose to work or there is something wrong here.
Please advise,
Thanks,
George
_______________________________________________
sipx-dev mailing list [email protected]
List Archive: http://list.sipfoundry.org/archive/sipx-dev
Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
sipXecs IP PBX -- http://www.sipfoundry.org/
