C L wrote:
> Theoretically it's possible to embed certificates into a Windows and
> Linux executables - not sure about other architectures though.

I don't recall the exact invocation off the top of my head but you
can create a make rule that's something like:

  cert.o: cert.pem
     ld -o $@ (flags) $<

and that will convert the specified PEM (or DER) files into data
segments with external symbols providing the caddr_t (char *) and
size.  Something like const char * cert_data and size_t cert_size.
You can then declare the symbols as 'extern' in your source code
and treat it like any other buffer loaded from disk.

Alternately you can explicitly include the cert as a constant
string.  It works but requires you to manually maintain that code.
 The linker will always use the current files.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to