Developing client in c

[Michael Luich <mluich@stonesrose.com>]

 Hello Everyone,

I'm trying to develop my application in c. And since I've never done
LDAP before I thought i'd do a test program to work out the how's of
retrieving from an ldap directory. in this case I'm pulling a X509
certificate from the verisign directory. I successfully run the search
and can retrieve the data, but the certificate;binary is incomplete.
I've tried a number of different things but cannot seem to get the
whole certificate. Below is the hard coded test program, and any help
would be greatly appreciated!




--
Michael Luich
Stone's Rose
mluich@stonesrose.com



#include <stdio.h>
#include "ldap.h"
/* Specify the search criteria here. */

#define HOSTNAME "directory.verisign.com"

#define PORTNUMBER 389

#define BASEDN ""

#define SCOPE LDAP_SCOPE_SUBTREE

#define FILTER "(mail=mluich@stonesrose.com)"

char *encode_64 (char *message);

int
main (int argc, char **argv)
{

  LDAP *ld;

  LDAPMessage *result, *e;

  char *dn, *cert;
  char **vals;

  int rc;


  LDAPMessage *res;


  char *a;

  int version, i;

  BerElement *ber;

// /* Print out an informational message. */
//
//   printf ("Connecting to host %s at port %d...\n\n", HOSTNAME, PORTNUMBER);

/* STEP 1: Get a handle to an LDAP connection and

set any session preferences. */

  if ((ld = ldap_init (HOSTNAME, PORTNUMBER)) == NULL)
    {

      perror ("ldap_init");

      return (1);

    }

/* Use the LDAP_OPT_PROTOCOL_VERSION session preference to specify

that the client is an LDAPv3 client. */

  version = LDAP_VERSION3;

  ldap_set_option (ld, LDAP_OPT_PROTOCOL_VERSION, &version);

/* STEP 2: Bind to the server.

In this example, the client binds anonymously to the server

(no DN or credentials are specified). */

  rc = ldap_simple_bind_s (ld, NULL, NULL);

  if (rc != LDAP_SUCCESS)
    {

      fprintf (stderr, "ldap_simple_bind_s: %s\n", ldap_err2string (rc));

      return (1);

    }


/* STEP 3: Perform the LDAP operations.

In this example, a simple search operation is performed.

The client iterates through each of the entries returned and

prints out the DN of each entry. */

  rc = ldap_search_ext_s (ld, BASEDN, SCOPE, FILTER, NULL, 0,
              NULL, NULL, NULL, 0, &result);

  if (rc != LDAP_SUCCESS)
    {

      fprintf (stderr, "ldap_search_ext_s: %s\n", ldap_err2string (rc));

      return (1);

    }



  if ((vals =
       ldap_get_values_len (ld, result, "usercertificate;binary")) != NULL)
    {
      for (i = 0; vals[i] != NULL; i++)
    {

      printf ("%d - %s: %s\n", i, a, vals[i]);

//        if (!strcmp (a, "usercertificate;binary"))
//          {

      printf ("%s: %s\nlength: %d\n\n", a, vals[i], sizeof (vals[i]));
      encode_64 (vals[i]);
//          }
    }
    }
  else
    {
      fprintf (stderr, "ldap_get_values_len: %s\n", ldap_err2string (rc));
    }

  ldap_value_free (vals);
  ldap_msgfree (result);
/* STEP 4: Disconnect from the server. */
  ldap_unbind (ld);
  return (0);
}


char *
encode_64 (char *message)
{
#include <openssl/bio.h>
#include <openssl/evp.h>

  BIO *bio, *b64;
  //char message[] = "Hello World \n";

  b64 = BIO_new (BIO_f_base64 ());
  bio = BIO_new_fp (stdout, BIO_NOCLOSE);
  bio = BIO_push (b64, bio);
  BIO_write (bio, message, strlen (message));
  BIO_flush (bio);

  BIO_free_all (bio);


}