OpenSSL 0.9.5-dev 09 Aug 1999
Consider the following: Sign a PKCS#10 with apps/x509.c
openssl x509 -CAserial serial.txt -CAkey RSA_1024_NONE.key.pem
-CA RSA_RSA_1024_NONE.cert.pem -in req.pem -req
In this case need_rand can be set to zero.
But it is set to one in
else if (strcmp(*argv,"-req") == 0)
{
reqfile=1;
need_rand = 1;
}
..
..
else if (strcmp(*argv,"-CA") == 0)
{
if (--argc < 1) goto bad;
CAfile= *(++argv);
CA_flag= ++num;
need_rand = 1;
}
Regards Rene
--
-----------------------------------------------------------
Rene G. Eberhard
Mail : [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]