directory-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Kiran Ayyagari <kayyag...@apache.org>
Subject Re: Certificate search and validation
Date Wed, 14 Aug 2013 03:37:33 GMT
On Wed, Aug 14, 2013 at 1:38 AM, Levit, Shai <shai.levit@verizon.com> wrote:

> Since LDAP can store a variety of files, can it also store Certificates
> and Key Pairs for S/MIME validation and verification ? And if so, how is
> this accomplished ?
>
 the certificates using the 'userCertificate' attribute (present in
inetOrgPerson and
 pkiUser objectclasses present in 'core' schema)
and public/private keys with the attributes present in 'tlsKeyInfo'
objectclass of 'apache' schema

(you can even create your own objectclass and include these attributes as
well)

> Are the certificates stored as attributes ? Files (PEM / p.12) ? Or is
> there a search parameter that then further points to a certificate store
> for encryption / decryption process ?
>
> they are stored as attributes, just use the above said attribute names
while searching to get the values

> Thanks
>
> Shai Levit, M.S.c
> Software Engineer | Verizon SUMS
> Mobile: (616) 610-7403
> Email: shai.levit@one.verizon.com
>
>


-- 
Kiran Ayyagari
http://keydap.com

Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message