Extracting Certificate Information

I'm running a servlet that is only accesible via SSL using Client Certificates. The servlet needs to extract the user information from the certificate and use it to identify the user and pass it to the backend system. Has anyone done this before and can you provide some info on how to do it

Here's Java's API for XML:
http://java.sun.com/xml/index.html
All you'd need to do is use their parser on the XML document, then write it out in whatever format you want.

Similar Messages

How to extract certificates from IE for digital signature

hi
how to extract certificates from the cert store provided by Internet Explorer 6.0 and use it to read & verify the digital signatures present in the pc.this is needed in my web based application n i have no idea!!!
pls help me out
i have studied a lot about all JCA n JCE but the extraction part still baffles me!!!
my application will be java based so i can make an applet/ servlet/ jsp
drop your ideas as soon as u get time as i am stuck in the initial phase itself
priya_16

hi
i've the same problem. i've found this solution, but you need download a JCE Provider that allow you to read the explorer certificate store.
You can try this one: https://download.assembla.se/jceprovider/
and the code:
import se.assembla.*;
public class Listcerts {
     public static void list() throws Exception{
          java.security.Security.insertProviderAt(new se.assembla.jce.provider.ms.MSProvider(), 2);
          KeyStore ks = KeyStore.getInstance("MSKS","assembla");
          ks.load(null,null);
          X509Certificate cert=null;
          String alias=null;
          int count=0;
          for (java.util.Enumeration e=ks.aliases();e.hasMoreElements();){
                    alias=(String)e.nextElement();
                    cert=(X509Certificate)ks.getCertificate(alias);
                    System.out.println("\n Certificado alias"+alias+":");
                    System.out.println(cert);
               count++;
          System.out.println ("NUM CERTS="+count);
now, i need the same solution for Firefox browser XP
good luck
Message was edited by:
meteko

How to retrieve client certificate information from sender mail adapter

Hi, expert:
I have a requirement to verify the validation of coming email with digital certification. The mail is with digital certification. If the coming email is valid, I 'll get the attachemt of the mail for further processing. I have a sender mail adapter and receiver file adapter configued.
I have already my own developed adapter module, which is configued in mail adapter. My question is how to retrieve the detailed certificate information in the adapter module developed by myself. Is it feasible?
Thanks a lot.

The WL-Client-Proxy cert should be the cert used on the proxy side if SSL is configured between Apache and WebLogic, so I believe that is the reason why that does not work. Basically, the problem here is that SSL is end-to-end, and the two ends of this transaction are the client and apache.
That said, when you add the +ExportCertData option, this should record the client's SSL certificate in the vairable SSL_CLIENT_CERT. So you should be able to use request.getAttribute("SSL_CLIENT_CERT").
See:
http://www.modssl.org/docs/2.8/ssl_reference.html
If this doesn't work for you (which is possible if the WL_Proxy is doing something funny to the request), it is probably best just to dump out the entire contents of the session, and see what you have:
for (Enumeration e = request.getAttributeNames() ; e.hasMoreElements() ; ) {
String attr = (String)e.nextElement();
System.out.println("ATTR = " + attr);
System.out.println("VAL = " + request.getAttribute(attr));
If you can't see any SSL certificate there, you will have to work out some way to pass this on manually.
cheers,
Trevor

Sales order does not extract plant information from material master data

Hi experts,
I have created a sales order. However, the plant in the shipping tab can only be manually entered.
I have made the check:
the customer material master data does not have the plant info.
the customer master data does not have it either.
It is defined in the material master data: sales:general/plant
But the sales order did not extract this information. Why does this happen?
Thank you in advance.
Best regards,
Fan

Hello Friend,
As right stated by you,
The Plant will be copied from the master data to the sales order, if not it should be manually entered
The Sequence System will search for the Plant is as follow..
1. Customer material infor record, If it was not maintained then it will search in
2. Customer master, if the entre was not maintained in the SHIPPING TAB
3. Finally it will search in the Material master in the Sales organisation data 1 in the field DELVERING PLANT field.
So please search whether the entry was maintained in that field at the sales:sales organisation data 1.
This might be the issue.
Please revert if you want further details
regards,
santosh

Client certificate information

Hello,
Does anyone have a definitive answer for how to retrieve
client certificate information in coldfusionMX7 using Apache 2.0.x
(just http server, not tomcat)? I can get it out of the environment
in a perl script...I just don't know how to pass it to
coldfusion..the client cert CGI variables are null. I've also tried
using jsp's to retrieve the info. The information is obviously not
getting to jrun. I've searched high and low, nobody seems to know
what to do.
Thanks
Apache 2.0.x (has been configured with SSLOptions +StdEnvVars
+ExportCertData)
Coldfusion MX7

IVootmon,
I am trying to do the same on ColdFusionMX7 and ColdFusion8.
The ColdFusion CGI variables for CERT_ are all empty. Did you find
a solution to pass CERT_ info to ColdFusion? Thanks.

Extracting pointer information and displaying it as an image

Hey,
I am using Intel's OpenCV image processing library in LabVIEW.
There's a pointer to a struct IplImage that is passed around in order to run image processing functions.
The struct IplImage is defined as:
typedef struct _IplImage
int nSize; /* sizeof(IplImage) */
int ID; /* version (=0)*/
int nChannels; /* Most of OpenCV functions support 1,2,3 or 4 channels */
int alphaChannel; /* ignored by OpenCV */
int depth; /* pixel depth in bits: IPL_DEPTH_8U, IPL_DEPTH_8S, IPL_DEPTH_16U,
IPL_DEPTH_16S, IPL_DEPTH_32S, IPL_DEPTH_32F and IPL_DEPTH_64F are supported */
char colorModel[4]; /* ignored by OpenCV */
char channelSeq[4]; /* ditto */
int dataOrder; /* 0 - interleaved color channels, 1 - separate color channels.
cvCreateImage can only create interleaved images */
int origin; /* 0 - top-left origin,
1 - bottom-left origin (Windows bitmaps style) */
int align; /* Alignment of image rows (4 or 8).
OpenCV ignores it and uses widthStep instead */
int width; /* image width in pixels */
int height; /* image height in pixels */
struct _IplROI *roi;/* image ROI. when it is not NULL, this specifies image region to process */
struct _IplImage *maskROI; /* must be NULL in OpenCV */
void *imageId; /* ditto */
struct _IplTileInfo *tileInfo; /* ditto */
int imageSize; /* image data size in bytes
(=image->height*image->widthStep
in case of interleaved data)*/
char *imageData; /* pointer to aligned image data */
int widthStep; /* size of aligned image row in bytes */
int BorderMode[4]; /* border completion mode, ignored by OpenCV */
int BorderConst[4]; /* ditto */
char *imageDataOrigin; /* pointer to a very origin of image data
(not necessarily aligned) -
it is needed for correct image deallocation */
IplImage;
I am having problems with closing OpenCV's GUI window when called from LabVIEW in Linux. A solution to this may be to not use OpenCV's GUI window in LabVIEW for Linux, but rather pass back the pointer to the processed image in LabVIEW. From that pointer, we can send it to a C wrapper to extract some information that we want from the struct in order and pass back those values to LabVIEW. Then LabVIEW will process those values and display the image. What will I need to extract from the pointer (via a C wrapper) in order to display the image onto LabVIEW?
I attached a LabVIEW example that I found. This example loads and displays an image. I am thinking of doing something similar to that. Instead of loading an image from the file dialog, I will pass all of the necessary information to Draw Flattened Pixmap.
Attachments:
Picture4.vi ‏56 KB

My description of my problems with interfacing OpenCV with LabVIEW is contained in this discussion
Basically, the code works in C in Linux, C in Windows, LabVIEW for Windows, but not in LabVIEW for Linux.
We finally were able to get OpenCV to interface with LabVIEW for Linux by doing some complex edition to make install. However, LabVIEW was still having trouble with the function to close all HighGUI windows. Even though it went through the function, it will not close the HighGUI window. Also the HighGUI window freezes and when it eventually closes, it crashes LabVIEW.
When I test it by writing C programs, the function does what it is supposed to do.

How to use NI CAN feature for extracting DBC information without a CAN Interface?

Hi,
I'm looking for some tricks in order to extract DBC Information using the NI CAN without a CAN interface...
Basically I have some DBC files and I would to analyze them to get hierarchy Messages and Channels (and their related information, offset, scale, etc.).
http://www.ni.com/white-paper/4294/en/
The function CAN Get Names is usefull and allow me depending on the mode to get a list of the Channels and Messages described in the DBC file. However, I'm encountering one major issue and none of the least, I cannot use the function the CAN Get Property... As it required a connector based on Task that I cannot provide since I dont have any real and physical CAN interface, for now. Therefore I cannot have any information about the channels neither about the messages...
Does anybody can give me a hand to fix that matter?
Solved!
Go to Solution.

Nelval wrote:
It seems that no matter the virtual port I am using, it does not work. Could you have a look at my sample.vi, I know it's poorly wired, especially since I'm more in .NET things than NI from my occupation ^^'. I also provided a dummy DBC file to simulate a very basic input.
And by the way is there any way then to get the Byte Array / Bit Array corresponding to a certain message (and how to set the signal values required to get the message)?
Your code isn't that bad, relativly easy to follow. In any case the problem had nothing to do with the CAN port being used. If you would probe the error wires around you would see that coming out of the CAN Init Start stated that the channel name didn't exist. Looking at how you had it wired you took the messages (or frames) and put them into the channels terminal, when I assume you wanted the channels. Then looking at your tree you were again trying to get the ID of a channel, but giving it the message name. I also added reading the Start Bit, Number of Bits, and Byte Order for all the channels read.
If you were to do this with XNET there would be completelly different functions, but the same operations can be done.
Unofficial Forum Rules and Guidelines - Hooovahh - LabVIEW Overlord
If 10 out of 10 experts in any field say something is bad, you should probably take their opinion seriously.
Attachments:
DBC Extraction Hooovahh Edit.vi ‏29 KB

Axis cache the certificate information?

This is a challenging problem:
We have a need to access Axis via HTTPS, so we set certificate information as following in Java code before call Axis:
System.setProperty("javax.net.ssl.keyStoreType", certType);
System.setProperty("javax.net.ssl.keyStore", keyStorePath);
System.setProperty("javax.net.ssl.keyStorePassword", keyStorePassword);
This works right for us after it's called the first time after we start application. However, if I remove certificate information, the call is still successful. Somehow, either Java or Axis remembers the certificate that it uses the first time.
We are using JDK 1.5.0_04 and Axis 1.2.1.
Any suggestion would be welcome!

Hi, you could try to keep in both server and client keystores the CA certificate
I hope it help you

Extracting package information from SSIS

Hi all,
I am supposed to maintain a bunch of excels documenting all the mappings I'm doing in SSIS. The excels have the following format:
Target Field | Target Type | Source Table | Source Field | Source Type | Transformation Rule
Apart from being incredibly tedious, it is hard to keep every excel current, as there are other people adding and taking information from the database model.
I plan to extract this information from SSIS and create the excels dinamically, but, apart from parsing the .dtsx for each package, I see no other way of getting what I need.
Any suggestions on how I should do this? Is there an easier way?
Cheers,
David Leal

The SSIS object model provides access to all aspects of the package, you can use it from both managed and unmanaged code. Also, take a look as SQL BI Metadata Samples that has similar goal of documenting the package, you may find some of its code useful for your project.

Extracting X.509 certificate information from OSB/OWSM

Hello everyone,
I'm using SOA suite 11gR1 and I'm creating a proxy service with an OWSM policy ( oracle/wss11_x509_token_with_message_protection_service_policy ) . I'd like to know how to extract the certificate details from the incoming message so my Web Services can acess them with something like the WebServicesContext interface.
Thanks !

I am working on this same scenario as well (and agree that OWSM documentation is incomplete for this important use case). Vikas Jain provides some further explanation of Verify Signature in a blog entry: http://ws-security.blogspot.com/2007/06/faq-owsm-1013-what-is-use-of-cerificate.html . Essentially he clarifies that the Verify Signature policy step is doing two different functions: 1) validating the signature using the public cert passed in the request, 2) validating that said public cert is actually trusted by the server (directly or through a trusted CA).
Unfortunately, even with this assistance, I have yet to get OWSM to work correctly using the X.509 certificate token profile for authentication purposes. OWSS does work for me but the desire is to externalize this security function to OWSM (outside of the service container).
Any information you find out appreciated.
Todd

How can I prevent client certificate information from being written to kjs log?

I have an application running on iPlanet Application server 6.0 that makes an SSL connection to an external site using client certificate. Problem : Every time the connection is wrapped in a client certificate, the entire SSL handshake including the key-exchange information is automatically being logged in the kjs log. How do I prevent the kjs from writing this inormation to the log ?

How are you making this SSL connection? Whatever library you are using must be writing to System.out().
You could avoid logging these messages by using file logs rather than console logs. But you could probably disable these messages by working with your SSL libraries as well.

How do I read a web page and extract text information from it with LabVIEW?

Hello,
I want to read a webpage (not Labview), extract the text from the page and then sort out the text to get the information I want. It would be like reading a weather webpage and wanting to extract the current temperature from the webpage usign labview. Any suggestions?
Thanks

The discussion below touches on the subject, it looks like it will do what you want.
http://forums.ni.com/ni/board/message?board.id=170&message.id=137315&requireLogin=False

Extract header information in adapter modules

Hi,
I need to write an adapter module which will be used to extract information from the soap header of the message.
Please provide some suggestion for this.
Regards,
Meenakshi

Hi Meenakshi,
Check this blog:
http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=%28J2EE3417300%29ID1708152450DB01924696702449628261End?blog=/pub/wlg/4623
Here the dynamic configuration is accessed using modules.. Also hope you are trying to get the soap header in receiver channel
Regards
Suraj
PS: If you search SDN you will get lot of codes (both is wiki and blogs)

Extracting XML information

Is there a way I can extract information from an XML file and create a list or a tab-delimited file?

Here's Java's API for XML:
http://java.sun.com/xml/index.html
All you'd need to do is use their parser on the XML document, then write it out in whatever format you want.

Extracting security information

I am trying to write a .Net C# based application that will allow me to extract Hyperion application security. For example roles and their tasks, for a given application its elements, security class and user/groups. And the relationship between this.Is there a .Net connector or something similar available for getting this information out?

When you run your python script, did you set the weblogic environment, by using setWLSEnv.(sh or cmd) script.
This file is located in the directory: <middleware-home>/wlserver_10.3/server/bin
You can also use the wlst.(sh or cmd) script, located in the directory: <middleware-home>/wlserver_10.3/common/bin

Extracting Certificate Information

Similar Messages

Maybe you are looking for