The Metaverse

Query LDAP

Jeff McMullen — Tue, 14 Nov 2017 15:34:06 GMT

Here is an example of how to query a secure LDAP service while using a certificate for authentication. This example utilizes a previous blog for importing the certificate: https://blogs.msdn.microsoft.com/metaverse/2017/11/09/capturing-a-pki-certificate/ char[] commaExcape = new char[] { ',' }; char quotestring = '"'; string accountName = "JDUser"; string url = "server.fqdn:636"; string attrs = "uid,givenname,cn,ou"; string[] attrset = attrs.Split(commaExcape); X509SecurityToken certtoken = GetSecurityToken("a1b2c3"); X509Certificate2 cert = new X509Certificate2(certtoken.Certificate); LdapConnection ldap = new LdapConnection(url); ldap.SessionOptions.SecureSocketLayer = true; ldap.SessionOptions.ProtocolVersion = 3; ldap.AuthType = AuthType.Basic; ldap.ClientCertificates.Add(cert); ldap.Bind(); SearchRequest request = new SearchRequest("c=us", "uid=" + accountName, SearchScope.Subtree, attrset); DirectoryResponse response = ldap.SendRequest(request); try { SearchResultEntry entry = ((SearchResultEntry)((new ArrayList((ReadOnlyCollectionBase)(((SearchResponse)(response)).Entries)))[0])); Hashtable hashtable = new Hashtable(); foreach(DictionaryEntry keyval in entry.Attributes) { ArrayList value = (new ArrayList((CollectionBase)(keyval.Value))); var key = System.Text.Encoding.Default.GetString((byte[])value[0]).Replace(quotestring.ToString(), ""); hashtable.Add(keyval, key); } } catch (ArgumentOutOfRangeException) { throw; }

Quering JSON with Certificate

Jeff McMullen — Tue, 14 Nov 2017 14:24:39 GMT

I recently had a requirement to query an application that requires certificate authentication and replies with JSON. This example utilizes a previous blog for importing the certificate: https://blogs.msdn.microsoft.com/metaverse/2017/11/09/capturing-a-pki-certificate/ X509SecurityToken certtoken = GetSecurityToken("a1b2c3"); X509Certificate2 cert = new X509Certificate2(certtoken.Certificate); string accountName = "JDUser"; string url = "https://server.fqdn/rest/" + accountName; ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls12; HttpWebRequest request = WebRequest.Create(url) as HttpWebRequest; request.ContentType = "application/json"; request.ClientCertificates.Add(cert); request.PreAuthenticate = true; try { WebResponse response = request.GetResponse(); Stream responseStream = response.GetResponseStream(); string responseContents = new StreamReader(responseStream).ReadToEnd(); JavaScriptSerializer JsonConvert = new JavaScriptSerializer(); object xmlresponse = JsonConvert.Deserialize(responseContents); Dictionary keyval = new Dictionary(); keyval = (new Dictionary((Dictionary)(xmlresponse))); Hashtable hashtable = new Hashtable(); foreach(KeyValuePair kvset in keyval) { hashtable.Add(kvset.Key, kvset.Value); } } catch (WebException) { // handle as you see fit. }

Capturing a PKI Certificate

Jeff McMullen — Thu, 09 Nov 2017 13:43:06 GMT

I found it was easiest to use a certificate token when accessing systems using a certificate. This is the method I use to accomplish the task querying based on the certificate thumbprint (the thumbprint ensures that I get correct certificate):

public X509SecurityToken GetSecurityToken(string certThumb)
 {
 X509SecurityToken securityToken = null;
 X509Store store = new X509Store(StoreName.My, StoreLocation.LocalMachine);
 store.Open(OpenFlags.ReadOnly);
 try
 {
 X509Certificate2Collection certs = store.Certificates.Find(X509FindType.FindByThumbprint, certThumb, false);
 X509Certificate2 cert;
 if(certs.Count == 1)
 {
 cert = certs[0];
 securityToken = new X509SecurityToken(cert);
 }
 else
 {
 securityToken = null;
 }
 }
 catch (Exception)
 {
 throw;
 }
 finally
 {
 if(store != null)
 {
 store.Close();
 }
 }
 return securityToken;
 }

In the beginning

Jeff McMullen — Sun, 05 Nov 2017 13:20:49 GMT

In the beginning there was the Metaverse, and the Metaverse was good.