The first two of these didn't get through, so I'll try again. If I end
up triple-posting, I apologize in advance.
This is not really an important question, but one I've been scratching
my head over for quite a while, and not knowing the answer gives me less
than full confidence in my setup.
The default install of openssl on my Fedora Core 2 box has a directory
layout that looks more or less like this after I've generated a few test
certificates:
CA (directory)
CA/private (directory)
certs (directory)
crl (directory)
index.txt (file)
newcerts (directory)
private (directory)
private/.rand (file)
requests (directory)
serial (file)
Now I've figured out that certs is for imported certificates, newcerts
is for generated certificates, private is for keys and (optionally) the
ironic entropy tracker, requests is for keeping certificate requests,
and crl is for revocation lists.
(I would have thought the "issued certs" comment in the sample
openssl.cnf meant "issued here", but I've determined that it means
"issued elsewhere".)
But I'm having the devil of a time figuring out the CA and CA/private
directory. Are they just vestigal, with no real purpose anymore?
I had originally thought that those would be where the CA would keep its
own certificate and key pair, but I see that is not what the sample
openssl.cnf says, and my boss thinks otherwise, too.
Anybody care to enlighten me?
--
Joel Rees <[EMAIL PROTECTED]>
digitcom, inc. 株式会社デジコム
Kobe, Japan +81-78-672-8800
** <http://www.ddcom.co.jp> **
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [email protected]
Automated List Manager [EMAIL PROTECTED]
