Abstract: LDAP is widely used in network information query and certificate query. However, on occasion the client and the directory server are isolated, public LDAP protocol is not efficient on this condition. This paper designs and implements a LDAP certificates query scheme for network isolation. The scheme needs not to require users to modify public LDAP protocol and can prevent malicious users from obtaining certificates.

Key words: certificates query, Lightweight Directory Access Protoco1（LDAP）, network isolation

摘要： LDAP协议广泛应用于网络信息资源查询和证书目录查询，然而在有些场合，证书的查询端和证书目录服务器之间有网络隔离设备，不能直接采用公开的远程目录访问协议来进行证书查询。设计和实现了一种内外网隔离的证书查询方案，既不用修改LDAP协议，又能够防止恶意用户非法获取证书。

关键词: 证书查询, 轻量级目录访问协议（LDAP）, 网络隔离