使用 openSSL 从 X509_Extension 获取电子邮件地址（主题备用名称的一部分）

Question

我有一个 iOS 应用程序试图从带有 openSSL 的证书中检索 SAN。我被困在可以正确获取 X509_Extension 的部分（我可以检查 X509_Extension 中的数据，它包含电子邮件地址，混合在一堆其他数据中）。我不知道如何从 X509_Extension.

中提取电子邮件地址

有人可以帮忙吗？谢谢。以下是我的代码：

int loc = X509_get_ext_by_NID(cert, NID_subject_alt_name, -1);
if (loc >= 0) {
    X509_EXTENSION * ext = X509_get_ext(cert, loc);
    //How to extract the email address from the ext?
}

Answer 1

受到this thread的启发，我终于解决了。飞扬:

int loc = X509_get_ext_by_NID(cert, NID_subject_alt_name, -1);

if (loc >= 0) {

    X509_EXTENSION * ext = X509_get_ext(cert, loc);

    BUF_MEM *bptr = NULL;

    char *buf = NULL;

    BIO *bio = BIO_new(BIO_s_mem());

    if(!X509V3_EXT_print(bio, ext, 0, 0)){

        // error handling...

    }

    BIO_flush(bio);

    BIO_get_mem_ptr(bio, &bptr);



    // now bptr contains the strings of the key_usage, take

    // care that bptr->data is NOT NULL terminated, so

    // to print it well, let's do something..

    buf = (char *)malloc( (bptr->length + 1)*sizeof(char) );



    memcpy(buf, bptr->data, bptr->length);

    buf[bptr->length] = '[=10=]';



    NSString *email = [NSString stringWithUTF8String:buf];

    NSRange r1 = [email rangeOfString:@"email:"];

    NSRange r2 = [email rangeOfString:@","];

    NSRange rSub = NSMakeRange(r1.location + r1.length, r2.location - r1.location - r1.length);

    NSString *email = [email substringWithRange:rSub];

}

使用 openSSL 从 X509_Extension 获取电子邮件地址（主题备用名称的一部分）

Get email address (part of Subject Alternative Name) from a X509_Extension with openSSL

iphone

openssl

ios