stef wrote:
>
> hi'
>
> could s.o. say to me why in the documentation of openssl in
> http://www.openssl.org/docs/crypto/pem.html there are _AUX method for
> certificate
>
> int PEM_write_X509_AUX(FILE *fp, X509 *x);
> X509 *PEM_read_X509_AUX(FILE *fp, X509 **x, pem_password_cb *cb, void *u);
>
> but not for certificate request ?
> like .... X509_REQ_AUX ....
>
> do this methods exit or there is another way to write certificate
> request with trusted options ??
>
The point of trust settings is to allow certificates (currently root
CAs) to have their usages modified by the user. So you can use the same
certificate store and have it produce errors if attempts are made to use
a certificate which chains to a root with an unauthorised purpose: so if
you set things up properly you can't use an SSL server CA for SSL client
use for example.
Since certificate requests aren't used for certificate verification,
there's no concept of a "trusted certificate request" and I'm not sure
what one would be expected to do.
Steve.
--
Dr Stephen N. Henson. http://www.drh-consultancy.demon.co.uk/
Personal Email: [EMAIL PROTECTED]
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the OpenSSL project: http://www.openssl.org/
Business Email: [EMAIL PROTECTED] PGP key: via homepage.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
