Certificate search and validation

["Levit, Shai" <sh...@verizon.com>]

Since LDAP can store a variety of files, can it also store Certificates and Key Pairs for S/MIME validation and verification ? And if so, how is this accomplished ?
Are the certificates stored as attributes ? Files (PEM / p.12) ? Or is there a search parameter that then further points to a certificate store for encryption / decryption process ?

Thanks

Shai Levit, M.S.c
Software Engineer | Verizon SUMS
Mobile: (616) 610-7403
Email: shai.levit@one.verizon.com

Re: Certificate search and validation

[Kiran Ayyagari <ka...@apache.org>]

On Wed, Aug 14, 2013 at 1:38 AM, Levit, Shai <sh...@verizon.com> wrote:

> Since LDAP can store a variety of files, can it also store Certificates
> and Key Pairs for S/MIME validation and verification ? And if so, how is
> this accomplished ?
>
 the certificates using the 'userCertificate' attribute (present in
inetOrgPerson and
 pkiUser objectclasses present in 'core' schema)
and public/private keys with the attributes present in 'tlsKeyInfo'
objectclass of 'apache' schema

(you can even create your own objectclass and include these attributes as
well)

> Are the certificates stored as attributes ? Files (PEM / p.12) ? Or is
> there a search parameter that then further points to a certificate store
> for encryption / decryption process ?
>
> they are stored as attributes, just use the above said attribute names
while searching to get the values

> Thanks
>
> Shai Levit, M.S.c
> Software Engineer | Verizon SUMS
> Mobile: (616) 610-7403
> Email: shai.levit@one.verizon.com
>
>


-- 
Kiran Ayyagari
http://keydap.com