| Lev Walkin | cfcf553 | 2004-09-26 13:13:31 +0000 | [diff] [blame] | 1 | |
| Lev Walkin | 9215729 | 2005-02-28 15:53:32 +0000 | [diff] [blame] | 2 | GENERAL INFORMATION |
| 3 | =================== |
| 4 | |
| Lev Walkin | cfcf553 | 2004-09-26 13:13:31 +0000 | [diff] [blame] | 5 | The X.509 (PKIX1) certificate decoder. Invoking `make` will compile the ASN.1 |
| Lev Walkin | 1e31883 | 2005-02-28 15:37:08 +0000 | [diff] [blame] | 6 | specifications from the rfc3280.txt in the above directory. |
| 7 | |
| Lev Walkin | 5e2f23e | 2006-08-25 01:51:29 +0000 | [diff] [blame^] | 8 | The ../../skeletons/converter-sample.c will supply the missing |
| Lev Walkin | 1e31883 | 2005-02-28 15:37:08 +0000 | [diff] [blame] | 9 | "int main()" routine which drives the decoding process. |
| Lev Walkin | cfcf553 | 2004-09-26 13:13:31 +0000 | [diff] [blame] | 10 | |
| Lev Walkin | 9215729 | 2005-02-28 15:53:32 +0000 | [diff] [blame] | 11 | x509dump USAGE |
| 12 | ============== |
| 13 | |
| 14 | To use the code, you'll have to prepare an X.509 certificate in DER encoding. |
| 15 | The typical X.509 certificate will have a PEM form (DER encoded data wrapped |
| 16 | in base64, wrapped in PEM "BEGIN" and "END" sections). The openssl x509 utility |
| 17 | may be used to convert between PEM and DER. |
| 18 | |
| 19 | EXAMPLE: Convert 'certificate.pem' into 'certificate.der': |
| 20 | |
| 21 | openssl x509 -inform PEM -in certificate.pem \ |
| 22 | -outform DER -out certificate.der |
| 23 | |
| 24 | After convertsion, the x509dump utility may be used to dump the contents |
| 25 | of the DER-encoded X.509 certificate: |
| 26 | |
| Lev Walkin | 5e2f23e | 2006-08-25 01:51:29 +0000 | [diff] [blame^] | 27 | ./x509dump certificate.der # Print as XML (BASIC-XER) |
| Lev Walkin | 9215729 | 2005-02-28 15:53:32 +0000 | [diff] [blame] | 28 | |
| 29 | The full list of recognized command line options may be obtained with |
| 30 | |
| 31 | > ./x509dump -h |
| Lev Walkin | 9215729 | 2005-02-28 15:53:32 +0000 | [diff] [blame] | 32 | |