Comments on: Extracting X509 Extensions from a CSR using the Bouncy Castle APIs http://unitstep.net/blog/2008/10/27/extracting-x509-extensions-from-a-csr-using-the-bouncy-castle-apis/ the home of peter chng Tue, 22 May 2012 03:36:29 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: TheFonz http://unitstep.net/blog/2008/10/27/extracting-x509-extensions-from-a-csr-using-the-bouncy-castle-apis/comment-page-1/#comment-316713 TheFonz Thu, 23 Feb 2012 16:07:31 +0000 http://unitstep.net/?p=407#comment-316713 Thanks you are life saver!!!!! The C# version below... Cant believe how badly documented the BouncyCastle libraries are... <code> X509Extensions GetX509ExtensionsFromCsr( Pkcs10CertificationRequest certificateSigningRequest ) { CertificationRequestInfo certificationRequestInfo = certificateSigningRequest.GetCertificationRequestInfo(); Asn1Set attributesAsn1Set = certificationRequestInfo.Attributes; // The `Extension Request` attribute is contained within an ASN.1 Set, // usually as the first element. X509Extensions certificateRequestExtensions = null; for (int i = 0; i = 1) { KeyValuePair pair = MakeX509Extensions((Asn1Sequence)attributeValues[0]); certificateRequestExtensions = new X509Extensions(pair.Key, pair.Value); // No need to search any more. break; } } } else if (derEncodable is Org.BouncyCastle.Asn1.Cms.Attribute) { Org.BouncyCastle.Asn1.Cms.Attribute attribute = (Org.BouncyCastle.Asn1.Cms.Attribute)derEncodable; if (attribute.AttrType.Equals(PkcsObjectIdentifiers.Pkcs9AtExtensionRequest)) { // The `Extension Request` attribute is present. Asn1Set attributeValues = attribute.AttrValues; // The X509Extensions are contained as a value of the ASN.1 Set. // Assume that it is the first value of the set. if (attributeValues.Count >= 1) { certificateRequestExtensions = (X509Extensions)attributeValues[0]; // No need to search any more. break; } } } } if (null == certificateRequestExtensions) { throw new Exception("Could not obtain X509 Extensions from the CSR"); } return certificateRequestExtensions; } </code> Thanks you are life saver!!!!!
The C# version below… Cant believe how badly documented the BouncyCastle libraries are…


X509Extensions GetX509ExtensionsFromCsr( Pkcs10CertificationRequest certificateSigningRequest )
{
CertificationRequestInfo certificationRequestInfo = certificateSigningRequest.GetCertificationRequestInfo();

Asn1Set attributesAsn1Set = certificationRequestInfo.Attributes;

// The `Extension Request` attribute is contained within an ASN.1 Set,
// usually as the first element.
X509Extensions certificateRequestExtensions = null;
for (int i = 0; i = 1)
{
KeyValuePair pair = MakeX509Extensions((Asn1Sequence)attributeValues[0]);
certificateRequestExtensions = new X509Extensions(pair.Key, pair.Value);
// No need to search any more.
break;
}
}
}
else if (derEncodable is Org.BouncyCastle.Asn1.Cms.Attribute)
{
Org.BouncyCastle.Asn1.Cms.Attribute attribute = (Org.BouncyCastle.Asn1.Cms.Attribute)derEncodable;

if (attribute.AttrType.Equals(PkcsObjectIdentifiers.Pkcs9AtExtensionRequest))
{
// The `Extension Request` attribute is present.
Asn1Set attributeValues = attribute.AttrValues;

// The X509Extensions are contained as a value of the ASN.1 Set.
// Assume that it is the first value of the set.
if (attributeValues.Count >= 1)
{
certificateRequestExtensions = (X509Extensions)attributeValues[0];
// No need to search any more.
break;
}
}
}
}

if (null == certificateRequestExtensions)
{
throw new Exception("Could not obtain X509 Extensions from the CSR");
}
return certificateRequestExtensions;
}

]]> By: Mohd Ekmal http://unitstep.net/blog/2008/10/27/extracting-x509-extensions-from-a-csr-using-the-bouncy-castle-apis/comment-page-1/#comment-165827 Mohd Ekmal Tue, 23 Jun 2009 03:04:35 +0000 http://unitstep.net/?p=407#comment-165827 Thanks man This example really help me. Thanks man This example really help me.

]]> By: Peter Chng http://unitstep.net/blog/2008/10/27/extracting-x509-extensions-from-a-csr-using-the-bouncy-castle-apis/comment-page-1/#comment-156702 Peter Chng Fri, 17 Apr 2009 02:27:50 +0000 http://unitstep.net/?p=407#comment-156702 @hemant Unfortunately, I don't really have any practical C# experience so I wouldn't be able to provide a straight code example. However, the Bouncy Castle libraries are also <a href="http://www.bouncycastle.org/csharp/" rel="nofollow">available in C#</a>, so the same basic procedure outlined here should work in C# using the available BC libraries for .NET. @hemant
Unfortunately, I don’t really have any practical C# experience so I wouldn’t be able to provide a straight code example. However, the Bouncy Castle libraries are also available in C#, so the same basic procedure outlined here should work in C# using the available BC libraries for .NET.

]]> By: hemant http://unitstep.net/blog/2008/10/27/extracting-x509-extensions-from-a-csr-using-the-bouncy-castle-apis/comment-page-1/#comment-156648 hemant Thu, 16 Apr 2009 20:36:30 +0000 http://unitstep.net/?p=407#comment-156648 Hello do you have any C# sample for decoding CSR? Thanks a lot. Hello do you have any C# sample for decoding CSR?

Thanks a lot.

]]>