Archived Forum Post

Index of archived forum posts

Question:

CRL Distribution point for a Cert

Mar 12 '15 at 17:31

Hello, Would it be possible to have a property on the Cert object, in order to read its CRL distribution list (they may be multiple) in OID 2.5.29.31?

Best regards,

Dennis


Accepted Answer

I added a new method to Chilkat.Cert named GetExtensionAsXml. You pass an OID, such as "2.5.29.31" or any of the OIDs listed here: http://www.alvestrand.no/objectid/2.5.29.31.html

The method will return the ASN.1 for the extension converted to XML. Some data within the XML may be base64 encoded, so the app would need to take the final step in decoding the base64.

What is the exact programming language, operating system, .NET Framework, Visual Studio version, etc. that you need?


Answer

Dennis, Please send me a sample certificate file that contains a CRL distribution list, and I'll see what I can do.

I'll have an answer for you soon (few hours?) about the CRL file..


Answer

It sounds a very good and flexible solution! I use the ActiveX version on Windows 7. Were you able to decode the OID in the certificate I sent you? The ExportCertXml method was not able to decode it propely.


Answer

Yes... All extensions are ASN.1 encoded (basically ASN.1 stored within the ASN.1). It decodes to XML. Give it at try and you'll see. The data within the XML will be base64 encoded, and you'll only need to base64 decode that to get the string.