There's a summary that's out-of-date, but still more-or-less OK at
http://www.intertrader.com/library/SSLeay/no_rsa.cfm
(Ignore the instructions on building the code and note that revoking a
certificate is now possible with the openssl ca command)
Andrew
> Jun-Hua Li wrote:
>
> Hi, I am new at security, if any stupid question, please forgive me
> .....
> Currently I am trying to do SSL with EDH cipher suite.After generate a
> DH parameter and load it, I think I need something for
> authentication, but what is that to be ? DH parameter signed by a CA ?
> I've tried to use CA.sh -sign to sign a DH parameter but it fail to
> recognize its format. Or should I use a seperate certificate ?
> If so, how to generate this certificate ?
>
> Thanks!
>
> Junhua
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
