how validate certificate authority - WeOnlyDo Discussion board

how validate certificate authority (wodCrypt)

by fredycuello, Thursday, August 28, 2008, 15:32 (5932 days ago)

hi, sorry my english

I tried your components to sign and verify documents. Its working fine.

I have several certificates with private key (*.pfx).
Each certificate is generated by a certificate authority (CA).
I have a certificate with public key of CA ( certif.cer )

How can i check if each of that certificates are valid, ie, is generated by CA?

Re: how validate certificate authority

by woddrazen, Thursday, August 28, 2008, 22:39 (5932 days ago) @ fredycuello

Fredy,


wodCrypt include wodCertificate component. In wodCertifcate component you can load Certificate, Private Key. Extract public key from certificate and private key...

Determines if certificate has associated private key. Maybe this is what you need?

More help for HasPrivateKey Property you can find here:
http://www.weonlydo.com/CertMng/Help/WODCERTMNGLib~Certificate~HasPrivateKey.html

Before you add HasPrivateKey Property to your code, you should load Certificate using Load Method and private key using LoadKey Method.


Drazen

Re: how validate certificate authority

by fredycuello, Friday, August 29, 2008, 21:44 (5931 days ago) @ woddrazen

ok. i will try this.
but, there are any way to validate if a certicate xxx.pfx is relationed with the AC, using the certificate of AC to do it?

In other words, if I receive a certificate xxx.pfx from another AC ( or genered with some component, like wodCrypt), is posible check if this certificate is valid or not?

Re: how validate certificate authority

by wodgrof, Saturday, August 30, 2008, 02:22 (5931 days ago) @ fredycuello

Hi Fredy,

You can check if a certificate is issued by a certain CA by loading CA's certificate and comparing it's public key with your certificate issuer's public key. So, let's say 'cert' is the certificate you are checking and 'CA' is the CA's certificate. You can check if 'cert.Issuer.PublicKey' is the same as 'CA.PublicKey' - if they are, the 'cert' is issued by CA.

I hope this information helps.

Regards,
Grof

Re: how validate certificate authority

by fredycuello, Monday, September 01, 2008, 15:29 (5928 days ago) @ wodgrof

thanks for you reply.