PureBasic

Binary Certificate Extension Data

See more Certificates Examples

Demonstrates how to binary certificate extension data by OID.

The GetExtensionBd method is added in Chilkat v9.5.0.96.

PureBasic

IncludeFile "CkBinData.pb"
IncludeFile "CkCert.pb"

Procedure ChilkatExample()

    success.i = 0

    cert.i = CkCert::ckCreate()
    If cert.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkCert::ckLoadFromFile(cert,"qa_data/certs/testCert.cer")
    If success = 0
        Debug CkCert::ckLastErrorText(cert)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    bd.i = CkBinData::ckCreate()
    If bd.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; The particular certificate in this test contains the following extensions

    oid.s = "1.2.250.1.71.1.2.5"
    success = CkCert::ckGetExtensionBd(cert,oid,bd)
    If success = 1
        Debug oid + ": " + CkBinData::ckGetEncoded(bd,"hex_lower")
    EndIf

    oid = "1.2.250.1.71.1.2.2"
    success = CkCert::ckGetExtensionBd(cert,oid,bd)
    If success = 1
        Debug oid + ": " + CkBinData::ckGetEncoded(bd,"hex_lower")
    EndIf

    oid = "1.2.250.1.71.1.2.3"
    success = CkCert::ckGetExtensionBd(cert,oid,bd)
    If success = 1
        Debug oid + ": " + CkBinData::ckGetEncoded(bd,"hex_lower")
    EndIf

    oid = "1.2.250.1.71.1.2.7"
    success = CkCert::ckGetExtensionBd(cert,oid,bd)
    If success = 1
        Debug oid + ": " + CkBinData::ckGetEncoded(bd,"hex_lower")
    EndIf

    oid = "1.2.250.1.71.4.2.5"
    success = CkCert::ckGetExtensionBd(cert,oid,bd)
    If success = 1
        Debug oid + ": " + CkBinData::ckGetEncoded(bd,"hex_lower")
    EndIf

    ; Sample output:
    ; 1.2.250.1.71.1.2.5: 040180
    ; 1.2.250.1.71.1.2.2: 020100
    ; 1.2.250.1.71.1.2.3: 1315383032353030303030312f32393030303539313432
    ; 1.2.250.1.71.1.2.7: 02010a
    ; 1.2.250.1.71.4.2.5: 30060c04534d3236

    ; The above binary values are actually ASN.1
    ; You can get the ASN.1 decoed by calling GetExtensionAsXml to get it in XML format,
    ; and then you extract the values from the XML.

    oid = "1.2.250.1.71.1.2.5"
    strXml.s = CkCert::ckGetExtensionAsXml(cert,oid)
    If CkCert::ckLastMethodSuccess(cert) = 1
        Debug oid + ": " + strXml
    EndIf

    oid = "1.2.250.1.71.1.2.2"
    strXml = CkCert::ckGetExtensionAsXml(cert,oid)
    If CkCert::ckLastMethodSuccess(cert) = 1
        Debug oid + ": " + strXml
    EndIf

    oid = "1.2.250.1.71.1.2.3"
    strXml = CkCert::ckGetExtensionAsXml(cert,oid)
    If CkCert::ckLastMethodSuccess(cert) = 1
        Debug oid + ": " + strXml
    EndIf

    oid = "1.2.250.1.71.1.2.7"
    strXml = CkCert::ckGetExtensionAsXml(cert,oid)
    If CkCert::ckLastMethodSuccess(cert) = 1
        Debug oid + ": " + strXml
    EndIf

    oid = "1.2.250.1.71.4.2.5"
    strXml = CkCert::ckGetExtensionAsXml(cert,oid)
    If CkCert::ckLastMethodSuccess(cert) = 1
        Debug oid + ": " + strXml
    EndIf

    ; Sample output:
    ; 1.2.250.1.71.1.2.5: <octets>gA==</octets>
    ; 1.2.250.1.71.1.2.2: <int>00</int>
    ; 1.2.250.1.71.1.2.3: <printable>8025000001/2900059142</printable>
    ; 1.2.250.1.71.1.2.7: <int>0A</int>
    ; 1.2.250.1.71.4.2.5: <sequence><utf8>SM26</utf8></sequence>

    ; "gA==" is the base64 encoded byte values
    ; "0A" is hex for decimal 1


    CkCert::ckDispose(cert)
    CkBinData::ckDispose(bd)


    ProcedureReturn
EndProcedure