(Tcl) Binary Certificate Extension Data

See more Certificates Examples

Demonstrates how to binary certificate extension data by OID.

The GetExtensionBd method is added in Chilkat v9.5.0.96.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

set cert [new_CkCert]

set success [CkCert_LoadFromFile $cert "qa_data/certs/testCert.cer"]
if {$success == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkCert $cert
    exit
}

set bd [new_CkBinData]

# The particular certificate in this test contains the following extensions

set oid "1.2.250.1.71.1.2.5"
set success [CkCert_GetExtensionBd $cert $oid $bd]
if {$success == 1} then {
    puts "$oid: [CkBinData_getEncoded $bd hex_lower]"
}

set oid "1.2.250.1.71.1.2.2"
set success [CkCert_GetExtensionBd $cert $oid $bd]
if {$success == 1} then {
    puts "$oid: [CkBinData_getEncoded $bd hex_lower]"
}

set oid "1.2.250.1.71.1.2.3"
set success [CkCert_GetExtensionBd $cert $oid $bd]
if {$success == 1} then {
    puts "$oid: [CkBinData_getEncoded $bd hex_lower]"
}

set oid "1.2.250.1.71.1.2.7"
set success [CkCert_GetExtensionBd $cert $oid $bd]
if {$success == 1} then {
    puts "$oid: [CkBinData_getEncoded $bd hex_lower]"
}

set oid "1.2.250.1.71.4.2.5"
set success [CkCert_GetExtensionBd $cert $oid $bd]
if {$success == 1} then {
    puts "$oid: [CkBinData_getEncoded $bd hex_lower]"
}

# Sample output:
# 1.2.250.1.71.1.2.5: 040180
# 1.2.250.1.71.1.2.2: 020100
# 1.2.250.1.71.1.2.3: 1315383032353030303030312f32393030303539313432
# 1.2.250.1.71.1.2.7: 02010a
# 1.2.250.1.71.4.2.5: 30060c04534d3236

# The above binary values are actually ASN.1
# You can get the ASN.1 decoed by calling GetExtensionAsXml to get it in XML format,
# and then you extract the values from the XML.

set oid "1.2.250.1.71.1.2.5"
set strXml [CkCert_getExtensionAsXml $cert $oid]
if {[CkCert_get_LastMethodSuccess $cert] == 1} then {
    puts "$oid: $strXml"
}

set oid "1.2.250.1.71.1.2.2"
set strXml [CkCert_getExtensionAsXml $cert $oid]
if {[CkCert_get_LastMethodSuccess $cert] == 1} then {
    puts "$oid: $strXml"
}

set oid "1.2.250.1.71.1.2.3"
set strXml [CkCert_getExtensionAsXml $cert $oid]
if {[CkCert_get_LastMethodSuccess $cert] == 1} then {
    puts "$oid: $strXml"
}

set oid "1.2.250.1.71.1.2.7"
set strXml [CkCert_getExtensionAsXml $cert $oid]
if {[CkCert_get_LastMethodSuccess $cert] == 1} then {
    puts "$oid: $strXml"
}

set oid "1.2.250.1.71.4.2.5"
set strXml [CkCert_getExtensionAsXml $cert $oid]
if {[CkCert_get_LastMethodSuccess $cert] == 1} then {
    puts "$oid: $strXml"
}

# Sample output:
# 1.2.250.1.71.1.2.5: <octets>gA==</octets>
# 1.2.250.1.71.1.2.2: <int>00</int>
# 1.2.250.1.71.1.2.3: <printable>8025000001/2900059142</printable>
# 1.2.250.1.71.1.2.7: <int>0A</int>
# 1.2.250.1.71.4.2.5: <sequence><utf8>SM26</utf8></sequence>

# "gA==" is the base64 encoded byte values
# "0A" is hex for decimal 1

delete_CkCert $cert
delete_CkBinData $bd