RE : Certificate in openldap

["De Leeuw Guy" <G.De_Leeuw@eurofer.be>]

Hello, many thanks for your respons.

>   userCertificate;binary:: <...base64-encoded-der...>
> 

The DER format it is automatically encoded in base64 or it is necessary to
encode with another tools/command ?

Because I try to search a certificate on a ldap database, but I don't know
the format used and the correct method to search this entry.

1) I put my certificate with ldapmodify -f file.ldif :
 when file.ldif equal :
 dn: <mydn>
 changetype: modify
 replace: userCertificate;binary
 userCertificate;binary:< file://path/mycert.der

2) I try to search the certificate on the ldap database :
 ldapsearch -s sub -f search.ldif "%s"
 when search.ldif equal : 
 userCertificate;binary:< file://path/mycert.der

The search return all entries from the database.

What is the best method to resolve this situation ?

Guy

> Richard Levitte   \ Spannvägen 38, II \ LeViMS@stacken.kth.se
> Redakteur@Stacken  \ S-168 35  BROMMA  \ T: +46-8-26 52 47
>                     \      SWEDEN       \ or +46-708-26 53 44
> Procurator Odiosus Ex Infernis                -- poei@bofh.se
> Member of the OpenSSL development team: http://www.openssl.org/
> 
> Unsolicited commercial email is subject to an archival fee of 
> $400. See <http://www.stacken.kth.se/> ~levitte/mail/> for more info.
>