The PEM format is already Base64.

Also, your sample includes characters that are invalid for a Base64 encoded data, which is explicitly 7 bit safe, so would not include an accented character. It looks like your null byte is in the wrong place. It probably should have come after the "=" sign.

Eric

On Sep 7, 2004, at 1:12 PM, Smith Baylor wrote:

Hi,

I am using C as the programming language and MySQL as the db.

unsigned char *cert_data;

Instead of storing in PEM format directly, I am storing it in base64
format - I believe this is more safer - feel free to prove me
otherwise.

Once I store the cert_data value, I also pad this with '\0' - string terminator.

I get something like this at the end of the encoding:
TGZ3am0wTDNjeTN3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
¡∏Úø7HZm™

which the db insert or update commands don't like.

/Shivaram






----- Original Message ----- From: Carlos Roberto Zainos H <[EMAIL PROTECTED]> Date: Tue, 7 Sep 2004 12:36:44 -0500 (CDT) Subject: Re: storing PEM encoded certs in database To: [EMAIL PROTECTED]


Hi I'm not an expert, but I think that could be some different depending on the DBMS and the driver connection being used.

For example, I'm using Oracle DB 10g with ODBC based client connection
to the DB.

I'm storing PEM certificates making a copy of it to a buffer and then
storing it into the DB via INSERT with the apropiate convertions:

unsigned char cert[2*1024];
BIO *buf;


buf = BIO_new (BIO_s_mem()); res = PEM_write_bio_X509(buf, xreq);//xreq is the X509 cert

longitud = sizeof(cert);
res = BIO_read(buf, cert, (int)longitud);
cert[res]='\0';
//executing the INSERT via exec_sql_comm(sentence) function, where
sentence = "insert into certificados
(estadocer,fechacaducidad,numserie,certificado) values
('V',to_date('%s','YYYY-MM-DD HH24:MI:SS'),'%i','%s')",fecha_cad,
num_serie, cert)"
Holpe this helps.
Zainos

Smith Baylor <[EMAIL PROTECTED]> wrote:



________________________________
Do You Yahoo!?
 Yahoo! Net: La mejor conexión a internet y 25MB extra a tu correo por
$100 al mes.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]


______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]

Reply via email to