Tcl

Binary Certificate Extension Data

See more Certificates Examples

Demonstrates how to binary certificate extension data by OID.

The GetExtensionBd method is added in Chilkat v9.5.0.96.

Tcl

load ./chilkat.dll

set success 0

set cert [new_CkCert]

set success [CkCert_LoadFromFile $cert "qa_data/certs/testCert.cer"]
if {$success == 0} then {
    puts [CkCert_lastErrorText $cert]
    delete_CkCert $cert
    exit
}

set bd [new_CkBinData]

# The particular certificate in this test contains the following extensions

set oid "1.2.250.1.71.1.2.5"
set success [CkCert_GetExtensionBd $cert $oid $bd]
if {$success == 1} then {
    puts "$oid: [CkBinData_getEncoded $bd hex_lower]"
}

set oid "1.2.250.1.71.1.2.2"
set success [CkCert_GetExtensionBd $cert $oid $bd]
if {$success == 1} then {
    puts "$oid: [CkBinData_getEncoded $bd hex_lower]"
}

set oid "1.2.250.1.71.1.2.3"
set success [CkCert_GetExtensionBd $cert $oid $bd]
if {$success == 1} then {
    puts "$oid: [CkBinData_getEncoded $bd hex_lower]"
}

set oid "1.2.250.1.71.1.2.7"
set success [CkCert_GetExtensionBd $cert $oid $bd]
if {$success == 1} then {
    puts "$oid: [CkBinData_getEncoded $bd hex_lower]"
}

set oid "1.2.250.1.71.4.2.5"
set success [CkCert_GetExtensionBd $cert $oid $bd]
if {$success == 1} then {
    puts "$oid: [CkBinData_getEncoded $bd hex_lower]"
}

# Sample output:
# 1.2.250.1.71.1.2.5: 040180
# 1.2.250.1.71.1.2.2: 020100
# 1.2.250.1.71.1.2.3: 1315383032353030303030312f32393030303539313432
# 1.2.250.1.71.1.2.7: 02010a
# 1.2.250.1.71.4.2.5: 30060c04534d3236

# The above binary values are actually ASN.1
# You can get the ASN.1 decoed by calling GetExtensionAsXml to get it in XML format,
# and then you extract the values from the XML.

set oid "1.2.250.1.71.1.2.5"
set strXml [CkCert_getExtensionAsXml $cert $oid]
if {[CkCert_get_LastMethodSuccess $cert] == 1} then {
    puts "$oid: $strXml"
}

set oid "1.2.250.1.71.1.2.2"
set strXml [CkCert_getExtensionAsXml $cert $oid]
if {[CkCert_get_LastMethodSuccess $cert] == 1} then {
    puts "$oid: $strXml"
}

set oid "1.2.250.1.71.1.2.3"
set strXml [CkCert_getExtensionAsXml $cert $oid]
if {[CkCert_get_LastMethodSuccess $cert] == 1} then {
    puts "$oid: $strXml"
}

set oid "1.2.250.1.71.1.2.7"
set strXml [CkCert_getExtensionAsXml $cert $oid]
if {[CkCert_get_LastMethodSuccess $cert] == 1} then {
    puts "$oid: $strXml"
}

set oid "1.2.250.1.71.4.2.5"
set strXml [CkCert_getExtensionAsXml $cert $oid]
if {[CkCert_get_LastMethodSuccess $cert] == 1} then {
    puts "$oid: $strXml"
}

# Sample output:
# 1.2.250.1.71.1.2.5: <octets>gA==</octets>
# 1.2.250.1.71.1.2.2: <int>00</int>
# 1.2.250.1.71.1.2.3: <printable>8025000001/2900059142</printable>
# 1.2.250.1.71.1.2.7: <int>0A</int>
# 1.2.250.1.71.4.2.5: <sequence><utf8>SM26</utf8></sequence>

# "gA==" is the base64 encoded byte values
# "0A" is hex for decimal 1

delete_CkCert $cert
delete_CkBinData $bd