Re^2: Help extracting public key from X509 .cer file

Yes, I saw this, but the CPAN tests shows that it fails on win32 sysytems. The following code generated this error. asn decode error: decode error at C:/Perl/site/lib/Convert/ASN1/_decode.pm line 60. at C:\scripts\parsder.pl line 3 Can't use string ("1") as a HASH ref while "strict refs" in use at C:/Perl/site/lib/Crypt/X509.pm line 503.

use Crypt::X509;
$cer = "C:\\temp\\test.cer";
$cert = Crypt::X509->new( cert => $cer );
$subject_email = $cert->subject_email;
[download]

Comment on Re^2: Help extracting public key from X509 .cer file Download Code

Replies are listed 'Best First'.
Re^3: Help extracting public key from X509 .cer file by RMGir (Prior) on Aug 15, 2005 at 19:11 UTC
Not a bad result for version 0.01 :) Did you try tracking down x509decode, which it's apparently based on? (Judging from a very quick reading of the README). Maybe you'll have more luck running Convert::ASN1; it includes the x509decode in the examples subdirectory. It may not work any better, but it's probably worth a try. Mike	[reply]
Re^4: Help extracting public key from X509 .cer file by boat73 (Scribe) on Aug 16, 2005 at 12:37 UTC
Perfect, thanks man. Now if only I could find a way to export it from the browser with perl I would be all set.	[reply]
Re: Help extracting public key from X509 .cer file by bcarroll (Pilgrim) on Mar 29, 2014 at 22:47 UTC
Assuming your perl script is a CGI script, sense you want to "export it from the browser". Apache/mod_ssl provides a convenient method of extracting X.509 certificate data. The ExportCertData option exports two additional environment variables: SSL_CLIENT_CERT and SSL_SERVER_CERT. These contain the PEM-encoded certificates of the server (always existing) and the client (only existing when client authentication is used). This can be used to import the certificates into CGI scripts. Add +ExportCertData to SSLOptions and the PEM encoded client certificate and issuer certificate(s) will be added to %ENV. The issuing CA certs are named SSL_CLIENT_CERT_CHAIN_x `<FilesMatch "\.(do\|cgi\|shtml\|phtml\|php)$"> SSLOptions +StdEnvVars +ExportCertData </FilesMatch>` [download] Here is an example CGI that displays the PEM encoded cert info: `#!/usr/bin/perl use CGI qw(:standard); use CGI::Carp qw(warningsToBrowser fatalsToBrowser); $\|=1; print header; print start_html("X.509 Certificate Info"); if ( defined( $ENV{SSL_CLIENT_S_DN} ) ){ print $ENV{SSL_CLIENT_CERT}, "<br />"; } else { print "ERROR: Client certificate not presented to webserver for auth +entication"; } print end_html;` [download]	[reply] [d/l] [select]