> > >What is the purpose of global CAs such as > > >Verisign if I can't trust the certificates to identify an end user? to make money? > I'm not looking for a magic bullet. What I am looking for is a method > to package and distribute clients and servers that will work out of > the box. include simple CA with your server management software. > And the answer is, that if you want to do client auth with > PKI then you can't. You need to modify the code to support whatever > local system is in use for certificate to ID mapping. authentication and authorization are different things. whatever authentication mechanism you use, you must still to the authorization (which is application specific) later. arne ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
