<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div>We create the certs using two methods:</div><div><br class=""></div><div><span class="Apple-tab-span" style="white-space:pre"> </span>- self signed certificates (snake oil)</div><div><span class="Apple-tab-span" style="white-space:pre"> </span>- Let’s Encrypt certificates</div><div><br class=""></div><div>And of course we also use certificates we buy from various sources.</div><div><br class=""></div><div>I can add the self-signed cert creation to the library.</div><div><br class=""></div><div>- Marc</div><div><br class=""></div><div><br class=""><blockquote type="cite" class=""><div class="">On 9 Mar 2020, at 17:35, Benoit Chesneau <<a href="mailto:bchesneau@gmail.com" class="">bchesneau@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Thanks with that an the snippet from Leonard and Marc I have all what I need I thin;k. I will try later today to mix that. One thing I am not sure to understand is how this certificate is created and how you did find the information about it. Is there any place I should read for it?<div class=""><br class=""></div><div class=""><br class=""></div><div class="">Benoit</div></div><br class=""><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Mar 9, 2020 at 9:23 AM Roger Lipscombe <<a href="mailto:roger@differentpla.net" class="">roger@differentpla.net</a>> wrote:<br class=""></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex">This is probably not complete (because we generate our own<br class="">
certificates), but here's what we use:<br class="">
<br class="">
-include_lib("public_key/include/public_key.hrl").<br class="">
<br class="">
get_certificate_subject_cn(#'OTPCertificate'{tbsCertificate = OTPTBS}) -><br class="">
get_certificate_subject_cn(OTPTBS);<br class="">
get_certificate_subject_cn(#'OTPTBSCertificate'{subject = Subject}) -><br class="">
get_cn(Subject).<br class="">
<br class="">
get_cn({rdnSequence, Seq}) -><br class="">
get_cn(Seq);<br class="">
get_cn([]) -><br class="">
undefined;<br class="">
get_cn([[#'AttributeTypeAndValue'{type = ?'id-at-commonName',<br class="">
value = {utf8String, Value}}] | _]) -><br class="">
Value;<br class="">
get_cn([_|Rest]) -><br class="">
get_cn(Rest).<br class="">
<br class="">
get_serial_number(#'OTPCertificate'{tbsCertificate = OTPTBS}) -><br class="">
get_serial_number(OTPTBS);<br class="">
get_serial_number(#'OTPTBSCertificate'{serialNumber = SerialNumber}) -><br class="">
SerialNumber.<br class="">
<br class="">
On Sun, 8 Mar 2020 at 23:34, Benoit Chesneau <<a href="mailto:bchesneau@gmail.com" target="_blank" class="">bchesneau@gmail.com</a>> wrote:<br class="">
><br class="">
> How can I get informations about an SSL certificate ? Specifically I am looking for a way to retrieve the issuer, subject, and the serial number of the certificate.<br class="">
><br class="">
> The record I get from decoding using public_key functions is hard to parse so any help is welcome. Maybe there is already an api/app somewhere for it?<br class="">
><br class="">
> Benoît<br class="">
><br class="">
><br class="">
</blockquote></div>
</div></blockquote></div><br class=""></body></html>