SlideShare una empresa de Scribd logo
1 de 10
Elektroniskā paraksta integrācija informācijas sistēmāsAutentifikācija
Saturs Sertifikātu autentifikācijas apskats Sertifikātu autentifikācijas piemēri: ,[object Object]
PHP,[object Object]
Demo Autentifikācija ASP.NET un PHP
Autentifikācija ASP.NET Klienta SSL autentifkācijas gadījumā satur klienta sertifikāta informāciju             HttpClientCertificate cert = Request.ClientCertificate;            if (cert.IsPresent)            {                // validate certificate using OCSP if needed in addition to                 // CRL validation done by IIS web server                //                // OcspClient ocspClient = new OcspClient(new Uri("https://ocsp.eme.lv/responder.eme"));                // ocspClient.Verify = true;                // ...                // get user data from the certificate by parsing subject name                string clientName = null;                if (cert.Subject.Contains("CN="))                {                    int idx = cert.Subject.IndexOf("CN=") + 3;                    clientName = cert.Subject.Substring(idx, cert.Subject.Length - idx);                    if (clientName.Contains(","))                        clientName = clientName.Substring(0, clientName.IndexOf(","));                } // ...            } OCSP pārbaude vēlama, bet nav obligāta, jo web serveris pats veic pārbaudi, izmantojot CRL
Autentifikācija PHP uz IIS7 if (isset($_SERVER["CERT_FLAGS"])){echo "Sertifikāta numurs: {$_SERVER['CERT_SERIALNUMBER']} <br/>";echo "Lietotāja subject name: {$_SERVER['CERT_SUBJECT']} <br/>";  $pair_array = parse_subject_name($_SERVER['CERT_SUBJECT']);print_subject_name($pair_array);}else{echo "User information not known!";} function parse_subject_name($serial){  $values = array();  $pairs = preg_split("/[,]+/", $serial);  $count = count($pairs);  for ($i = 0; $i < $count; $i++)  {if (strlen(trim($pairs[$i])) > 0)    {      $pair = preg_split("/[=]/", trim($pairs[$i]));      $values[$pair[0]] = $pair[1];    }   }return (array)$values;}function print_subject_name($pair_array){foreach ($pair_array as $field => $value)  {echo "{$field}: {$value} <br/>";  }} Karogs uzstādīts, ja klients veidojis SSL pieslēgumu ar savu klienta sertifikātu CERT_SERIALNUMBER mainīgais satur sertifikāta unikālo identifikācijas numuru,  CERT_SUBJECT satur sertifikāta īpašnieka informāciju – arī personas kodu Palīgmetode īpašnieka informācijas pārveidei atribūtu un to vērtību masīvā
Sertifikātu autentifikācijas specifika Vienā SSL sesijā tikai viens autentificēts sertifikāts: ,[object Object],Ja SSL jau izveidots bez sertifikāta, ar to autentificēties sesijas laikā nevar ,[object Object],[object Object]
Demo Autentifikācija ārpus web sistēmas
Sertifikātu autentifikācija
Sertifikātu autentifikācija

Más contenido relacionado

Destacado

Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTEverything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTExpeed Software
 
Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsProduct Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsPixeldarts
 
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthThinkNow
 
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfAI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfmarketingartwork
 
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024Neil Kimberley
 
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)contently
 
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024Albert Qian
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsKurio // The Social Media Age(ncy)
 
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Search Engine Journal
 
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summarySpeakerHub
 
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd Clark Boyd
 
Getting into the tech field. what next
Getting into the tech field. what next Getting into the tech field. what next
Getting into the tech field. what next Tessa Mero
 
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentLily Ray
 
Time Management & Productivity - Best Practices
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best PracticesVit Horky
 
The six step guide to practical project management
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project managementMindGenius
 
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...RachelPearson36
 
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...Applitools
 

Destacado (20)

Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTEverything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPT
 
Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsProduct Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
 
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
 
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfAI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
 
Skeleton Culture Code
Skeleton Culture CodeSkeleton Culture Code
Skeleton Culture Code
 
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
 
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
 
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
 
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
 
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
 
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
 
Getting into the tech field. what next
Getting into the tech field. what next Getting into the tech field. what next
Getting into the tech field. what next
 
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
 
How to have difficult conversations
How to have difficult conversations How to have difficult conversations
How to have difficult conversations
 
Introduction to Data Science
Introduction to Data ScienceIntroduction to Data Science
Introduction to Data Science
 
Time Management & Productivity - Best Practices
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best Practices
 
The six step guide to practical project management
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project management
 
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
 
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
Unlocking the Power of ChatGPT and AI in Testing - A Real-World Look, present...
 

Sertifikātu autentifikācija

  • 1. Elektroniskā paraksta integrācija informācijas sistēmāsAutentifikācija
  • 2.
  • 3.
  • 5. Autentifikācija ASP.NET Klienta SSL autentifkācijas gadījumā satur klienta sertifikāta informāciju             HttpClientCertificate cert = Request.ClientCertificate;            if (cert.IsPresent)            {                // validate certificate using OCSP if needed in addition to                 // CRL validation done by IIS web server                //                // OcspClient ocspClient = new OcspClient(new Uri("https://ocsp.eme.lv/responder.eme"));                // ocspClient.Verify = true;                // ...                // get user data from the certificate by parsing subject name                string clientName = null;                if (cert.Subject.Contains("CN="))                {                    int idx = cert.Subject.IndexOf("CN=") + 3;                    clientName = cert.Subject.Substring(idx, cert.Subject.Length - idx);                    if (clientName.Contains(","))                        clientName = clientName.Substring(0, clientName.IndexOf(","));                } // ...            } OCSP pārbaude vēlama, bet nav obligāta, jo web serveris pats veic pārbaudi, izmantojot CRL
  • 6. Autentifikācija PHP uz IIS7 if (isset($_SERVER["CERT_FLAGS"])){echo "Sertifikāta numurs: {$_SERVER['CERT_SERIALNUMBER']} <br/>";echo "Lietotāja subject name: {$_SERVER['CERT_SUBJECT']} <br/>"; $pair_array = parse_subject_name($_SERVER['CERT_SUBJECT']);print_subject_name($pair_array);}else{echo "User information not known!";} function parse_subject_name($serial){ $values = array(); $pairs = preg_split("/[,]+/", $serial); $count = count($pairs); for ($i = 0; $i < $count; $i++) {if (strlen(trim($pairs[$i])) > 0) { $pair = preg_split("/[=]/", trim($pairs[$i])); $values[$pair[0]] = $pair[1]; } }return (array)$values;}function print_subject_name($pair_array){foreach ($pair_array as $field => $value) {echo "{$field}: {$value} <br/>"; }} Karogs uzstādīts, ja klients veidojis SSL pieslēgumu ar savu klienta sertifikātu CERT_SERIALNUMBER mainīgais satur sertifikāta unikālo identifikācijas numuru, CERT_SUBJECT satur sertifikāta īpašnieka informāciju – arī personas kodu Palīgmetode īpašnieka informācijas pārveidei atribūtu un to vērtību masīvā
  • 7.