Dr S N Henson wrote:
> Only problem is that this is on Windows and the standard c_rehash wont
> work.

Ah.

Oh well, the functionality can be emulated quite easily by mimicking the script.

First make sure we can actually verify our cert directly by file:

> openssl verify -CAfile ca.crt user.crt
user.crt: OK

Then we need to generate the subject name hash which is looked for the lookup:

> openssl x509 -hash -noout < ca.crt
b58aa201

We rename our ca file to work with the hash lookup method:

> ren ca.crt b58aa201.0

And finally:

> openssl verify -CApath . user.crt
user.crt: OK

//oscar
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to