C

Load .crl, Convert to XML, Get Revoked Serial Numbers and Dates

See more Certificates Examples

Load a binary .crl file (Certificate Revocation List), converts to XML, and then gets the revoked certificate serial numbers and revocation dates.

Note: This example requires Chilkat v9.5.0.77 or greater.

C

#include <C_CkBinData.h>
#include <C_CkAsn.h>
#include <C_CkXml.h>
#include <C_CkDateTime.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkBinData bdCrl;
    HCkAsn asn;
    HCkXml xml;
    int i;
    int count_i;
    const char *tagPath;
    int j;
    int count_j;
    int k;
    int count_k;
    const char *revokedCertSerialHex;
    const char *dateRevoked;
    HCkDateTime dt;

    success = FALSE;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Load a binary .crl file.
    bdCrl = CkBinData_Create();
    success = CkBinData_LoadFile(bdCrl,"qa_data/crl/ca1.crl");
    if (success != TRUE) {
        printf("Failed to load CRL file.\n");
        CkBinData_Dispose(bdCrl);
        return;
    }

    asn = CkAsn_Create();
    success = CkAsn_LoadBd(asn,bdCrl);
    if (success != TRUE) {
        printf("%s\n",CkAsn_lastErrorText(asn));
        CkBinData_Dispose(bdCrl);
        CkAsn_Dispose(asn);
        return;
    }

    // Convert ASN.1 to XML and load into xml and re-emit for pretty printing..
    xml = CkXml_Create();
    CkXml_LoadXml(xml,CkAsn_asnToXml(asn));
    success = CkXml_SaveXml(xml,"qa_output/crl.xml");

    // Use this online tool to generate parsing code from CRL XML: 
    // Generate Parsing Code from XML

    // Here's code to parse the XML.  This code was generated by the above tool,
    // and then we modified it by removing unneeded code and changing some names

    dt = CkDateTime_Create();

    i = 0;
    count_i = CkXml_NumChildrenHavingTag(xml,"sequence");
    while (i < count_i) {
        CkXml_putI(xml,i);

        j = 0;
        count_j = CkXml_NumChildrenHavingTag(xml,"sequence[i]|sequence");
        while (j < count_j) {
            CkXml_putJ(xml,j);

            k = 0;
            count_k = CkXml_NumChildrenHavingTag(xml,"sequence[i]|sequence[j]|sequence");
            while (k < count_k) {
                CkXml_putK(xml,k);

                // Get the revoked certificate's serial number in uppercase hex.
                revokedCertSerialHex = CkXml_getChildContent(xml,"sequence[i]|sequence[j]|sequence[k]|int");
                printf("serial number: %s\n",revokedCertSerialHex);

                // Get the date/time revoked.  It will be a string formatted as "YYMMDDhhmmssZ", such as "181023093028Z"
                dateRevoked = CkXml_getChildContent(xml,"sequence[i]|sequence[j]|sequence[k]|utctime");

                // Starting in Chilkat v9.5.0.77, date/time strings formatted as YYMMDDhhmmssZ can be parsed as follows:
                CkDateTime_SetFromTimestamp(dt,dateRevoked);
                printf("date revoked: %s\n",CkDateTime_getAsRfc822(dt,FALSE));

                k = k + 1;
            }

            j = j + 1;
        }

        i = i + 1;
    }



    CkBinData_Dispose(bdCrl);
    CkAsn_Dispose(asn);
    CkXml_Dispose(xml);
    CkDateTime_Dispose(dt);

    }