获取 X509 数字证书里面的使用者信息 (openssl)

最新推荐文章于 2025-05-12 00:05:44 发布

tsh185

最新推荐文章于 2025-05-12 00:05:44 发布

阅读量1w

点赞数 1

CC 4.0 BY-SA版权

分类专栏： openssl

本文链接：https://blog.youkuaiyun.com/tsh185/article/details/8600079

openssl 专栏收录该内容

8 篇文章

订阅专栏

本文介绍了一个用于解析X509证书主体信息的C语言实现方法。通过定义结构体并使用静态数组存储常见字段，该方法能有效地获取并打印证书中如国家名、组织名等关键信息。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

#define ENTRY_COUNT  7

struct entry {
 	int key;
	char *name;
};
static const struct entry nids[ENTRY_COUNT] = {
	{NID_countryName, "countryName"},
	{NID_stateOrProvinceName, "stateOrProvinceName"},
	{NID_localityName, "localityName"},
	{NID_organizationName, "organiationName"},
	{NID_organizationalUnitName, "organizationalUnitName"},
	{NID_commonName, "commonName"},
	{NID_pkcs9_emailAddress, "emailAddress"},
};

static int  x509_get_subject(X509 *x)
{
	X509_NAME *xn = NULL;
	ASN1_STRING *d = NULL;
	
	int j = 0;
	int pos = -1;
	unsigned i = 0;
	xn = X509_get_subject_name(x);
	j = X509_NAME_entry_count(xn);
	
	for (i = 0; i < ENTRY_COUNT; i++) {
		pos = -1;
		for (;;) {
			pos = X509_NAME_get_index_by_NID(xn, nids[i].key, pos);
			if (pos >=0 && pos <= j) {   // pos != -1
				d = X509_NAME_ENTRY_get_data(X509_NAME_get_entry(xn, pos));
				printf("%s = %s [%d]\n", nids[i].name, d->data, d->length);
			}
		}
	}
	return 0;
}