[Freeipa-users] host usercertificate attribute

[Rob Crittenden]

Natxo Asenjo wrote:
> On Sat, May 16, 2015 at 10:24 PM, Natxo Asenjo <natxo.asenjo at gmail.com
> <mailto:natxo.asenjo at gmail.com>> wrote:
>
>     hi,
>
>     If I retrieve the usercertificate attribute for host objects I get
>     some gibberish.
>
>     How can I decode the info I get from ldapsearch?
>
>
> maybe there is a way to feed that to openssl. What I ended up doing was
> using Perl and Crypt::X509 and I can see all the certificate elements.

They are DER-encoded files. Something like this will show the contents:

$ openssl x509 -text -in /tmp/file

rob