(SQL Server) Get Certificate Authority Information Access

Demonstrates how to get a certificate's Authority Information Access extension data (if it exists).

Note: This example requires Chilkat v9.5.0.76 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    DECLARE @cert int
    -- Use "Chilkat_9_5_0.Cert" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Cert', @cert OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    DECLARE @success int
    EXEC sp_OAMethod @cert, 'LoadFromFile', @success OUT, 'qa_data/certs/test_haswdt.cer'
    IF @success <> 1
      BEGIN
        EXEC sp_OAGetProperty @cert, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @cert
        RETURN
      END

    -- Get the Authority Information Access extension, which is at OID 1.3.6.1.5.5.7.1.1
    DECLARE @extensionXmlStr nvarchar(4000)
    EXEC sp_OAMethod @cert, 'GetExtensionAsXml', @extensionXmlStr OUT, '1.3.6.1.5.5.7.1.1'
    EXEC sp_OAGetProperty @cert, 'LastMethodSuccess', @iTmp0 OUT
    IF @iTmp0 = 0
      BEGIN

        PRINT 'Certificate does not have the AuthInfoAccess extension.'
        EXEC @hr = sp_OADestroy @cert
        RETURN
      END

    DECLARE @xml int
    -- Use "Chilkat_9_5_0.Xml" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Xml', @xml OUT

    EXEC sp_OAMethod @xml, 'LoadXml', @success OUT, @extensionXmlStr

    -- See what we have..
    EXEC sp_OAMethod @xml, 'GetXml', @sTmp0 OUT
    PRINT @sTmp0

    -- We should get XML like this:

    -- <?xml version="1.0" encoding="utf-8" ?>
    -- <sequence>
    --     <sequence>
    --         <oid>1.3.6.1.5.5.7.48.2</oid>
    --         <contextSpecific tag="6" constructed="0">aHR0cDovL2NydC5jb21vZG9jYS5jb20vQ09NT0RPUlNBQ2xpZW50QXV0aGVudGljYXRpb25hbmRTZWN1
    -- cmVFbWFpbENBLmNydA==</contextSpecific>
    --     </sequence>
    --     <sequence>
    --         <oid>1.3.6.1.5.5.7.48.1</oid>
    --         <contextSpecific tag="6" constructed="0">aHR0cDovL29jc3AuY29tb2RvY2EuY29t</contextSpecific>
    --     </sequence>
    -- </sequence>

    -- Typically, a certificate AIA(Authority Information access) contains 2 parts:
    -- 
    --     On-line Certificate Status Protocol (1.3.6.1.5.5.7.48.1)
    --     Certification Authority Issuer (1.3.6.1.5.5.7.48.2)
    -- 
    -- The base64 content for each OID (in this case) is just a string.  
    -- The data can be accessed and decoded like this:

    DECLARE @sbOcsp int
    -- Use "Chilkat_9_5_0.StringBuilder" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.StringBuilder', @sbOcsp OUT

    EXEC sp_OAMethod @xml, 'GetChildContentSb', @success OUT, '/C/oid,1.3.6.1.5.5.7.48.1|++', @sbOcsp
    IF @success = 1
      BEGIN
        EXEC sp_OAMethod @sbOcsp, 'Decode', @success OUT, 'base64', 'utf-8'

        EXEC sp_OAMethod @sbOcsp, 'GetAsString', @sTmp0 OUT
        PRINT '1.3.6.1.5.5.7.48.1:  ' + @sTmp0
      END

    DECLARE @sbIssuer int
    -- Use "Chilkat_9_5_0.StringBuilder" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.StringBuilder', @sbIssuer OUT

    EXEC sp_OAMethod @xml, 'GetChildContentSb', @success OUT, '/C/oid,1.3.6.1.5.5.7.48.2|++', @sbIssuer
    IF @success = 1
      BEGIN
        EXEC sp_OAMethod @sbIssuer, 'Decode', @success OUT, 'base64', 'utf-8'

        EXEC sp_OAMethod @sbIssuer, 'GetAsString', @sTmp0 OUT
        PRINT '1.3.6.1.5.5.7.48.2:  ' + @sTmp0
      END

    -- The output looks like this:

    -- 1.3.6.1.5.5.7.48.1:  http://ocsp.comodoca.com
    -- 1.3.6.1.5.5.7.48.2:  http://crt.comodoca.com/COMODORSAClientAuthenticationandSecureEmailCA.crt

    -- -------------------------------------------------------------------------------
    -- Note: The Chilkat path passed to GetChildContentSb is composed of two commands:
    -- The first command is "/C/oid,1.3.6.1.5.5.7.48.1".   It says "traverse the XML tree from the caller
    -- node and stop at the 1st node having tag = "oid" and content = "1.3.6.1.5.5.7.48.1".
    -- The "|" char separates the 1st command from the 2nd.
    -- The 2nd command is "++" and says "move to the next sibling".

    EXEC @hr = sp_OADestroy @cert
    EXEC @hr = sp_OADestroy @xml
    EXEC @hr = sp_OADestroy @sbOcsp
    EXEC @hr = sp_OADestroy @sbIssuer


END
GO