Tcl

Load .crl, Convert to XML, Get Revoked Serial Numbers and Dates

See more Certificates Examples

Load a binary .crl file (Certificate Revocation List), converts to XML, and then gets the revoked certificate serial numbers and revocation dates.

Note: This example requires Chilkat v9.5.0.77 or greater.

Tcl

load ./chilkat.dll

set success 0

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# Load a binary .crl file.
set bdCrl [new_CkBinData]

set success [CkBinData_LoadFile $bdCrl "qa_data/crl/ca1.crl"]
if {$success != 1} then {
    puts "Failed to load CRL file."
    delete_CkBinData $bdCrl
    exit
}

set asn [new_CkAsn]

set success [CkAsn_LoadBd $asn $bdCrl]
if {$success != 1} then {
    puts [CkAsn_lastErrorText $asn]
    delete_CkBinData $bdCrl
    delete_CkAsn $asn
    exit
}

# Convert ASN.1 to XML and load into xml and re-emit for pretty printing..
set xml [new_CkXml]

CkXml_LoadXml $xml [CkAsn_asnToXml $asn]
set success [CkXml_SaveXml $xml "qa_output/crl.xml"]

# Use this online tool to generate parsing code from CRL XML: 
# Generate Parsing Code from XML

# Here's code to parse the XML.  This code was generated by the above tool,
# and then we modified it by removing unneeded code and changing some names

set dt [new_CkDateTime]

set i 0
set count_i [CkXml_NumChildrenHavingTag $xml "sequence"]
while {$i < $count_i} {
    CkXml_put_I $xml $i

    set j 0
    set count_j [CkXml_NumChildrenHavingTag $xml "sequence[i]|sequence"]
    while {$j < $count_j} {
        CkXml_put_J $xml $j

        set k 0
        set count_k [CkXml_NumChildrenHavingTag $xml "sequence[i]|sequence[j]|sequence"]
        while {$k < $count_k} {
            CkXml_put_K $xml $k

            # Get the revoked certificate's serial number in uppercase hex.
            set revokedCertSerialHex [CkXml_getChildContent $xml "sequence[i]|sequence[j]|sequence[k]|int"]
            puts "serial number: $revokedCertSerialHex"

            # Get the date/time revoked.  It will be a string formatted as "YYMMDDhhmmssZ", such as "181023093028Z"
            set dateRevoked [CkXml_getChildContent $xml "sequence[i]|sequence[j]|sequence[k]|utctime"]

            # Starting in Chilkat v9.5.0.77, date/time strings formatted as YYMMDDhhmmssZ can be parsed as follows:
            CkDateTime_SetFromTimestamp $dt $dateRevoked
            puts "date revoked: [CkDateTime_getAsRfc822 $dt 0]"

            set k [expr $k + 1]
        }
        set j [expr $j + 1]
    }
    set i [expr $i + 1]
}

delete_CkBinData $bdCrl
delete_CkAsn $asn
delete_CkXml $xml
delete_CkDateTime $dt