|
Chilkat • HOME • .NET Core C# • Android™ • AutoIt • C • C# • C++ • Chilkat2-Python • CkPython • Classic ASP • DataFlex • Delphi ActiveX • Delphi DLL • Go • Java • Lianja • Mono C# • Node.js • Objective-C • PHP ActiveX • PHP Extension • Perl • PowerBuilder • PowerShell • PureBasic • Ruby • SQL Server • Swift 2 • Swift 3,4,5... • Tcl • Unicode C • Unicode C++ • VB.NET • VBScript • Visual Basic 6.0 • Visual FoxPro • Xojo Plugin
(PureBasic) Duplicate CSR Created by OpenSSL with Config.cnfSee more CSR ExamplesDemonstrates how to duplicate a CSR created by the following commands: # Generate Private Key openssl ecparam -name secp256k1 -genkey -noout -out PrivateKey.pem #Generate CSR openssl req -new -sha256 -key PrivateKey.pem -extensions v3_req -config Config.cnf -out CSR.csr
IncludeFile "CkEcc.pb" IncludeFile "CkPrivateKey.pb" IncludeFile "CkPrng.pb" IncludeFile "CkXml.pb" IncludeFile "CkCsr.pb" IncludeFile "CkStringBuilder.pb" Procedure ChilkatExample() ; This example assumes the Chilkat API to have been previously unlocked. ; See Global Unlock Sample for sample code. ; This example duplicates the CSR created by OpenSSL with the following config file: ; oid_section = OIDs ; [ OIDs ] ; certificateTemplateName= 1.3.6.1.4.1.311.20.2 ; ; [ req ] ; default_bits = 2048 ; emailAddress = it@example.sa ; req_extensions = v3_req ; x509_extensions = v3_ca ; prompt = no ; default_md = sha256 ; req_extensions = req_ext ; distinguished_name = dn ; ; [ v3_req ] ; basicConstraints = CA:FALSE ; keyUsage = digitalSignature, nonRepudiation, keyEncipherment ; ; [req_ext] ; certificateTemplateName = ASN1:PRINTABLESTRING:ZATCA-Code-Signing ; subjectAltName = dirName:alt_names ; ; [ dn ] ; CN =EXAMPLE-CORP # Common Name ; C=SA # Country Code e.g SA ; OU=HEAD-OFFICE # Organization Unit Name ; O=ASC # Organization Name ; ; [alt_names] ; SN=1-ASC|2-V01|3-1234567890 # EGS Serial Number 1-ABC|2-PQR|3-XYZ ; UID=312345678900003 # Organization Identifier (VAT Number) ; title=1100 # Invoice Type ; registeredAddress=Dammam # Address ; businessCategory=IT # Business Category ; The OpenSSL commands we are duplicating: ; openssl ecparam -name secp256k1 -genkey -noout -out PrivateKey.pem ; openssl req -new -sha256 -key PrivateKey.pem -extensions v3_req -config Config.cnf -out CSR.csr ; The 1st step is to actually use OpenSSL to generate a sample CSR.csr that we wish to duplicate. ; With the sample CSR.csr, we get the ExtensionRequest as XML. ; For example: sbCsr.i = CkStringBuilder::ckCreate() If sbCsr.i = 0 Debug "Failed to create object." ProcedureReturn EndIf success.i = CkStringBuilder::ckLoadFile(sbCsr,"qa_data/csr/openssl_cnf/CSR.csr","utf-8") If success = 0 Debug "Failed to load CSR.csr" CkStringBuilder::ckDispose(sbCsr) ProcedureReturn EndIf csr0.i = CkCsr::ckCreate() If csr0.i = 0 Debug "Failed to create object." ProcedureReturn EndIf success = CkCsr::ckLoadCsrPem(csr0,CkStringBuilder::ckGetAsString(sbCsr)) If success = 0 Debug CkCsr::ckLastErrorText(csr0) CkStringBuilder::ckDispose(sbCsr) CkCsr::ckDispose(csr0) ProcedureReturn EndIf xml0.i = CkXml::ckCreate() If xml0.i = 0 Debug "Failed to create object." ProcedureReturn EndIf success = CkCsr::ckGetExtensionRequest(csr0,xml0) If success = 0 Debug CkCsr::ckLastErrorText(csr0) CkStringBuilder::ckDispose(sbCsr) CkCsr::ckDispose(csr0) CkXml::ckDispose(xml0) ProcedureReturn EndIf ; Let's examine the extension request.. Debug CkXml::ckGetXml(xml0) ; <?xml version="1.0" encoding="utf-8"?> ; <set> ; <sequence> ; <sequence> ; <oid>1.3.6.1.4.1.311.20.2</oid> ; <asnOctets> ; <printable>ZATCA-Code-Signing</printable> ; </asnOctets> ; </sequence> ; <sequence> ; <oid>2.5.29.17</oid> ; <asnOctets> ; <sequence> ; <contextSpecific tag="4" constructed="1"> ; <sequence> ; <set> ; <sequence> ; <oid>2.5.4.4</oid> ; <utf8>1-ASC|2-V01|3-1234567890</utf8> ; </sequence> ; </set> ; <set> ; <sequence> ; <oid>0.9.2342.19200300.100.1.1</oid> ; <utf8>312345678900003</utf8> ; </sequence> ; </set> ; <set> ; <sequence> ; <oid>2.5.4.12</oid> ; <utf8>1100</utf8> ; </sequence> ; </set> ; <set> ; <sequence> ; <oid>2.5.4.26</oid> ; <utf8>Dammam</utf8> ; </sequence> ; </set> ; <set> ; <sequence> ; <oid>2.5.4.15</oid> ; <utf8>IT</utf8> ; </sequence> ; </set> ; </sequence> ; </contextSpecific> ; </sequence> ; </asnOctets> ; </sequence> ; </sequence> ; </set> ; If you wish to generate the above XML without going through the above steps, copy the XML into ; the online tool at https://tools.chilkat.io/xmlCreate ; Here is the generated code for the above XML: xml.i = CkXml::ckCreate() If xml.i = 0 Debug "Failed to create object." ProcedureReturn EndIf CkXml::setCkTag(xml, "set") CkXml::ckUpdateChildContent(xml,"sequence|sequence|oid","1.3.6.1.4.1.311.20.2") CkXml::ckUpdateChildContent(xml,"sequence|sequence|asnOctets|printable","ZATCA-Code-Signing") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|oid","2.5.29.17") CkXml::ckUpdateAttrAt(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific",1,"tag","4") CkXml::ckUpdateAttrAt(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific",1,"constructed","1") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set|sequence|oid","2.5.4.4") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set|sequence|utf8","1-ASC|2-V01|3-1234567890") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[1]|sequence|oid","0.9.2342.19200300.100.1.1") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[1]|sequence|utf8","312345678900003") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[2]|sequence|oid","2.5.4.12") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[2]|sequence|utf8","1100") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[3]|sequence|oid","2.5.4.26") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[3]|sequence|utf8","Dammam") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[4]|sequence|oid","2.5.4.15") CkXml::ckUpdateChildContent(xml,"sequence|sequence[1]|asnOctets|sequence|contextSpecific|sequence|set[4]|sequence|utf8","IT") ; We'll need a new secp256k1 private key, so let's generate it. ecdsa.i = CkEcc::ckCreate() If ecdsa.i = 0 Debug "Failed to create object." ProcedureReturn EndIf prng.i = CkPrng::ckCreate() If prng.i = 0 Debug "Failed to create object." ProcedureReturn EndIf privKey.i = CkEcc::ckGenEccKey(ecdsa,"secp256k1",prng) If CkEcc::ckLastMethodSuccess(ecdsa) = 0 Debug CkEcc::ckLastErrorText(ecdsa) CkStringBuilder::ckDispose(sbCsr) CkCsr::ckDispose(csr0) CkXml::ckDispose(xml0) CkXml::ckDispose(xml) CkEcc::ckDispose(ecdsa) CkPrng::ckDispose(prng) ProcedureReturn EndIf Debug "Generated secp256k1 private key." ; Use a new CSR object to generate a CSR with the private key and extension request. csr.i = CkCsr::ckCreate() If csr.i = 0 Debug "Failed to create object." ProcedureReturn EndIf ; Add the [dn] fields ; [ dn ] ; CN =EXAMPLE-CORP # Common Name ; C=SA # Country Code e.g SA ; OU=HEAD-OFFICE # Organization Unit Name ; O=ASC # Organization Name CkCsr::setCkCommonName(csr, "EXAMPLE-CORP") CkCsr::setCkCountry(csr, "SA") CkCsr::setCkCompanyDivision(csr, "HEAD-OFFICE") CkCsr::setCkCompany(csr, "ASC") ; Add the extension request to the CSR CkCsr::ckSetExtensionRequest(csr,xml) ; Generate the CSR with the extension request csrPem.s = CkCsr::ckGenCsrPem(csr,privKey) If CkCsr::ckLastMethodSuccess(csr) = 0 Debug CkCsr::ckLastErrorText(csr) CkPrivateKey::ckDispose(privKey) CkStringBuilder::ckDispose(sbCsr) CkCsr::ckDispose(csr0) CkXml::ckDispose(xml0) CkXml::ckDispose(xml) CkEcc::ckDispose(ecdsa) CkPrng::ckDispose(prng) CkCsr::ckDispose(csr) ProcedureReturn EndIf Debug csrPem CkPrivateKey::ckDispose(privKey) ; Sample output: ; -----BEGIN CERTIFICATE REQUEST----- ; MIIBuDCCAV8CAQAwSDEVMBMGA1UEAwwMRVhBTVBMRS1DT1JQMQswCQYDVQQGEwJT ; QTEUMBIGA1UECwwLSEVBRC1PRkZJQ0UxDDAKBgNVBAoMA0FTQzBWMBAGByqGSM49 ; AgEGBSuBBAAKA0IABFI5rusr76HiJcMMr1r4L0B0BOAs6azLkt/RwHoT6A0xFRRt ; tulWT40tNhx3qJ4I5ePNgMceOEtuK1kMGVTovI6ggbcwgbQGCSqGSIb3DQEJDjGB ; pjCBozAhBgkrBgEEAYI3FAIEFBMSWkFUQ0EtQ29kZS1TaWduaW5nMH4GA1UdEQR3 ; MHWkczBxMSEwHwYDVQQEDBgxLUFTQ3wyLVYwMXwzLTEyMzQ1Njc4OTAxHzAdBgoJ ; kiaJk/IsZAEBDA8zMTIzNDU2Nzg5MDAwMDMxDTALBgNVBAwMBDExMDAxDzANBgNV ; BBoMBkRhbW1hbTELMAkGA1UEDwwCSVQwCgYIKoZIzj0EAwIDRwAwRAIgJnbgpSGb ; diB+0M1VTqc1GU9sFsfnOvVN/8WhWRRxQIwCIF5eH9vgMgXyoU284X8Bx3dqOJ4q ; xashGWci87POxSvT ; -----END CERTIFICATE REQUEST----- CkStringBuilder::ckDispose(sbCsr) CkCsr::ckDispose(csr0) CkXml::ckDispose(xml0) CkXml::ckDispose(xml) CkEcc::ckDispose(ecdsa) CkPrng::ckDispose(prng) CkCsr::ckDispose(csr) ProcedureReturn EndProcedure |
||||
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.