Hello Everyone,

I'm trying to develop my application in c. And since I've never done LDAP before I thought i'd do a test program to work out the how's of retrieving from an ldap directory. in this case I'm pulling a X509 certificate from the verisign directory. I successfully run the search and can retrieve the data, but the certificate;binary is incomplete. I've tried a number of different things but cannot seem to get the whole certificate. Below is the hard coded test program, and any help would be greatly appreciated!

-- Michael Luich Stone's Rose mluich@stonesrose.com

#include <stdio.h> #include "ldap.h" /* Specify the search criteria here. */

#define HOSTNAME "directory.verisign.com"

#define PORTNUMBER 389

#define BASEDN ""

#define SCOPE LDAP_SCOPE_SUBTREE

#define FILTER "(mail=mluich@stonesrose.com)"

char *encode_64 (char *message);

int main (int argc, char **argv) {

LDAP *ld;

LDAPMessage *result, *e;

char *dn, *cert;   char **vals;

int rc;

LDAPMessage *res;

char *a;

int version, i;

BerElement *ber;

// /* Print out an informational message. */ // //   printf ("Connecting to host %s at port %d...\n\n", HOSTNAME, PORTNUMBER);

/* STEP 1: Get a handle to an LDAP connection and

set any session preferences. */

if ((ld = ldap_init (HOSTNAME, PORTNUMBER)) == NULL)     {

perror ("ldap_init");

return (1);

}

/* Use the LDAP_OPT_PROTOCOL_VERSION session preference to specify

that the client is an LDAPv3 client. */

version = LDAP_VERSION3;

ldap_set_option (ld, LDAP_OPT_PROTOCOL_VERSION, &version);

/* STEP 2: Bind to the server.

In this example, the client binds anonymously to the server

(no DN or credentials are specified). */

rc = ldap_simple_bind_s (ld, NULL, NULL);

if (rc != LDAP_SUCCESS)     {

fprintf (stderr, "ldap_simple_bind_s: %s\n", ldap_err2string (rc));

return (1);

}

/* STEP 3: Perform the LDAP operations.

In this example, a simple search operation is performed.

The client iterates through each of the entries returned and

prints out the DN of each entry. */

rc = ldap_search_ext_s (ld, BASEDN, SCOPE, FILTER, NULL, 0,               NULL, NULL, NULL, 0, &result);

if (rc != LDAP_SUCCESS)     {

fprintf (stderr, "ldap_search_ext_s: %s\n", ldap_err2string (rc));

return (1);

}

if ((vals =        ldap_get_values_len (ld, result, "usercertificate;binary")) != NULL)     {       for (i = 0; vals[i] != NULL; i++)     {

printf ("%d - %s: %s\n", i, a, vals[i]);

//        if (!strcmp (a, "usercertificate;binary")) //          {

printf ("%s: %s\nlength: %d\n\n", a, vals[i], sizeof (vals[i]));       encode_64 (vals[i]); //          }     }     }   else     {       fprintf (stderr, "ldap_get_values_len: %s\n", ldap_err2string (rc));     }

ldap_value_free (vals);   ldap_msgfree (result); /* STEP 4: Disconnect from the server. */   ldap_unbind (ld);   return (0); }

char * encode_64 (char *message) { #include <openssl/bio.h> #include <openssl/evp.h>

BIO *bio, *b64;   //char message[] = "Hello World \n";

b64 = BIO_new (BIO_f_base64 ());   bio = BIO_new_fp (stdout, BIO_NOCLOSE);   bio = BIO_push (b64, bio);   BIO_write (bio, message, strlen (message));   BIO_flush (bio);

BIO_free_all (bio);

}