PureBasic

Get Certificate User Principal Name (UPN)

See more Certificates Examples

Demonstrates how to get a certificate's UPN from the SAN (Subject Alternative Name). Most certificates do not have a UPN. This example only applies to those certificates that have a User Principal Name.

Note: This example requires Chilkat v9.5.0.90 or greater due to fixes made in getting the UPN from the SAN.

PureBasic

IncludeFile "CkXml.pb"
IncludeFile "CkCert.pb"

Procedure ChilkatExample()

    success.i = 0

    cert.i = CkCert::ckCreate()
    If cert.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkCert::ckLoadFromFile(cert,"qa_data/certs/sample.cer")
    If success = 0
        Debug CkCert::ckLastErrorText(cert)
        CkCert::ckDispose(cert)
        ProcedureReturn
    EndIf

    xml.i = CkXml::ckCreate()
    If xml.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkXml::ckLoadXml(xml,CkCert::ckSubjectAlternativeName(cert))
    Debug CkXml::ckGetXml(xml)

    ; A certificate with a User Principal Name in the SAN might have this:

    ; <SubjectAltName>
    ;     <rfc822Name>joe@example.com</rfc822Name>
    ;     <name type="oid" oid="1.3.6.1.4.1.311.20.2.3">joe@example.com</name>
    ; </SubjectAltName>

    ; The OID 1.3.6.1.4.1.311.20.2.3 is for the User Principal Name.
    upn.s = CkXml::ckChilkatPath(xml,"/A/name,oid,1.3.6.1.4.1.311.20.2.3|*")
    If CkXml::ckLastMethodSuccess(xml) = 0
        Debug "No user principle name."
    Else
        Debug "User Principle Name = " + upn
    EndIf



    CkCert::ckDispose(cert)
    CkXml::ckDispose(xml)


    ProcedureReturn
EndProcedure