blocks|key|1096638|text|您不应该需要在二进制模式下打开base64编码的文件，因为它已经是8位干净的。然而，DER文件是二进制文件，因此在该实例中使用binmode()是正确的。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1096639|问题是，我认为，您要解析的证书实际上是PEM格式，而不是DER格式。如果您看一下Stephan的answer，他会详细说明不同之处(主要是在删除base64页眉/页脚之后，DER是PEM的base64解码变体)。|1096640|如果您可以访问openssl，则可以使用以下命令将其从PEM转换为DER：|1096641|openssl+x509+-inform+PEM+-outform+DER+-in+cert.pem+-out+cert.der|code-block|syntax|javascript|1096642|(其中cert.pem是输入证书的名称)。|1096643|然后，您应该能够在Crypt：：X+509中使用它。|1096644|如果我试图解析一个PEM格式文件，或者base64对它进行解码并解析它，我会得到相同的错误：|1096645|Failed+to+parse+cert:+decode+error+04<=>30+0+8++at+/usr/local/share/perl5/Convert/ASN1/_decode.pm+line+113.|1096646|但是，如果我使用DER版本，它将正确工作：|1096647|use+warnings+'all';
use+strict;

use+Crypt::X509;

my+$file+=+'cert.der';
my+$size+=+(stat+$file)[7];

my+$cert;
open(my+$fh,+'<',+$file)+or+die+"failed+to+open+cert:+$!";
binmode($fh);
read+$fh,+$cert,+$size;
close($fh);

my+$x509+=+Crypt::X509->new(cert+=>+$cert);
if($x509->error)+{
++++die+"Failed+to+parse+cert:+"+.+$x509->error;
}|1096648|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/a/38991864/791908^0|1R|9|0|1C|6|0|0|0|0|3|8|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|18|8|@$9|19|A|1A|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|1B|8|@]|D|@$9|1C|A|1D|1|1E]]|E|$]]|$1|H|3|I|5|6|7|1F|8|@]|D|@]|E|$]]|$1|J|3|K|5|L|7|1G|8|@]|D|@]|E|$M|N]]|$1|O|3|P|5|6|7|1H|8|@$9|1I|A|1J|B|C]]|D|@]|E|$]]|$1|Q|3|R|5|6|7|1K|8|@]|D|@]|E|$]]|$1|S|3|T|5|6|7|1L|8|@]|D|@]|E|$]]|$1|U|3|V|5|L|7|1M|8|@]|D|@]|E|$M|N]]|$1|W|3|X|5|6|7|1N|8|@]|D|@]|E|$]]|$1|Y|3|Z|5|L|7|1O|8|@]|D|@]|E|$M|N]]|$1|10|3|-4|5|6|7|1P|8|@]|D|@]|E|$]]]|11|$12|$5|13|14|15|E|$16|17]]]]

You should not need to open a base64 encoded file in binary mode, as it is already 8-bit clean. However a DER file is binary, and so the use of <code>binmode()</code> is correct in that instance.

The problem, I think, is that the certificate you are trying to
parse is actually in PEM format and not DER format. If you look at Stephan's <a href="https://stackoverflow.com/a/38991864/791908">answer</a>, he details the difference (mainly that a DER is the base64 decoded variant of the PEM, after removing the PEM header/footer).

If you have access to openssl, you can convert it from PEM to DER with the command:

<pre><code>openssl x509 -inform PEM -outform DER -in cert.pem -out cert.der
</code></pre>

(where <code>cert.pem</code> is the name of your input certificate).

You should then be able to use that with Crypt::X509.

If I attempt to parse a PEM format file, or base64 decode it and parse it, I get the same error:

<pre><code>Failed to parse cert: decode error 04&lt;=&gt;30 0 8 at /usr/local/share/perl5/Convert/ASN1/_decode.pm line 113.
</code></pre>

However if I use the DER version, it works correctly:

<pre><code>use warnings 'all';
use strict;

use Crypt::X509;

my $file = 'cert.der';
my $size = (stat $file)[7];

my $cert;
open(my $fh, '&lt;', $file) or die "failed to open cert: $!";
binmode($fh);
read $fh, $cert, $size;
close($fh);

my $x509 = Crypt::X509-&gt;new(cert =&gt; $cert);
if($x509-&gt;error) {
 die "Failed to parse cert: " . $x509-&gt;error;
}
</code></pre>

blocks|key|1667190|text|当使用MIME：：Base64+64：：decode将证书从PEM转换为DER时，需要删除PEM头和预告片，而不是解码|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1667191|-----BEGIN+CERTIFICATE-----
MIICVTCCAbegAwIBAgIELwBe7DAKBggqhkjOPQQDAjAaMRgwFgYDVQQDDA9mb28u
....
-----END+CERTIFICATE-----|code-block|syntax|javascript|1667192|您应该只解码base64部分：|1667193|MIICVTCCAbegAwIBAgIELwBe7DAKBggqhkjOPQQDAjAaMRgwFgYDVQQDDA9mb28u
....|1667194|由于-----BEGIN+CERTIFICATE-----等包含有效的base64字符，它们将用于解码，而无效字符则被忽略。|offset|length|style|CODE|1667195|entityMap^0|0|0|0|0|2|R|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|T|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|U|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|V|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|W|8|@$M|X|N|Y|O|P]]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|Z|8|@]|9|@]|A|$]]]|R|$]]

When converting the certificate from PEM to DER using MIME::Base64::decode you need to remove the PEM header and trailer, i.e. instead of decoding

<pre><code>-----BEGIN CERTIFICATE-----
MIICVTCCAbegAwIBAgIELwBe7DAKBggqhkjOPQQDAjAaMRgwFgYDVQQDDA9mb28u
....
-----END CERTIFICATE-----
</code></pre>

you should decode only the base64 part:

<pre><code>MIICVTCCAbegAwIBAgIELwBe7DAKBggqhkjOPQQDAjAaMRgwFgYDVQQDDA9mb28u
....
</code></pre>

Since <code>-----BEGIN CERTIFICATE-----</code> etc contain valid base64 characters they will be used for decoding and the invalid characters silently ignored.

I'm trying to extract the data from a .pem certificate with the Crypt::X509 library, but I get an error in object construction.
Here is what I'm doing:
1. Read the .pem file's content: 

<pre><code>my ($dev,$ino,$mode,$nlink,$uid,$gid,$rdev,$size,
 $atime,$mtime,$ctime,$blksize,$blocks) = stat $s_filename;
open FILE, "&lt;$s_filename" or die "no such file";
binmode FILE;
my $pem_cert;
read FILE, $pem_cert, $size;
close FILE; 
</code></pre>

2. Decode the content from base64 to receive the DER formatted content. This is done because the CPAN documentation of the Crypt::X509 library states that it needs to be passed:

<blockquote>
 A variable containing the DER formatted certificate to be parsed
</blockquote>

<pre><code>my $der = MIME::Base64::decode($pem_cert);
</code></pre>

<ol start="3">
<li>Call the Crypt::X509 constructor and check for errors:</li>
</ol>

<code>my $oref_x509= Crypt::X509-&gt;new(cert=&gt;$der);
if ( $oref_x509-&gt;error ) {
 warn "Error on parsing certificate: ",
 $oref_x509-&gt;error;
}</code>

I get the following error:

<pre><code>Error on parsing certificate: decode error 04&lt;=&gt;30 0 8 at ..&lt;path&gt;../Convert/ASN1/_decode.pm line 113. 
</code></pre>

I've tried with other certificate, but the error is the same.

Extract data from certificate with perl Crypt::X509

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

我试图使用Crypt：：X 509库从.pem证书中提取数据，但是在对象构造中出现了一个错误。下面是我正在做的工作: 1.读取.pem文件的内容：my ($dev,$ino,$mode,$nlink,$uid,$gid,$rdev,$size,   $atime,$mtime,$ctime,$blksize,$bloc...

问用perl Crypt：：X 509从证书中提取数据
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问用perl Crypt：：X 509从证书中提取数据EN