It’s interesting that this article shows that LACK OF GOOD DOCUMENTATION and
POOR API DESIGN are at the heart of this problem.
I have noticed over the years that much of our society has changed its very
idea of what a good application is.
It used to be that if something could not be easily
In the case of openssl, a big gain would be to simply document the command
line interface better and create a doc centric forum for people to add their
lessons learned filed around the particular feature area of openssl.
WORKING EXAMPLES would be REAL cool. Does anyone on this alias want to
I have been struggling with openssl for a few months now writing batch scripts
on windows trying to make a .net web client with a client certificate work with
2-way ssl against an apache web server.
Do you guys just want to continue to answer questions on this alias and not FIX
the docs
Couldn’t agree more Ted. I think the bar on open-source product documentation
has been going way up over time. If I were these guys, I’d get it right so I
wouldn’t have to keep bothering to answer so many questions over and over.
From: Ted Byers
Sent: Tuesday, November 13, 2012 2:49 PM
To:
and they don’t even seem to
want someone who does to help.
From: Magosányi, Árpád
Sent: Tuesday, November 13, 2012 1:51 PM
To: openssl-users@openssl.org
Subject: Re: I can't believe how much this sucks
On 11/13/2012 07:34 PM, Sanford Staab wrote:
Do you guys just want to continue to answer questions
It looks like your missing the openssl.cnf file or maybe the my_key.key file.
Double check your config file and command line parameters.
From: PRIYARANJAN NAYAK
Sent: Tuesday, October 23, 2012 3:03 AM
To: openssl-users@openssl.org
Subject: error while generating Certificate Signing Request
Good questions and similar to what is on my mind. Please let me know if you
get any good answers to these questions.
From: Ted Byers
Sent: Saturday, July 28, 2012 12:15 PM
To: openssl-users@openssl.org
Subject: client server management of client SSL certificates
I am familiar with basic
It really looks to me like the openssl documentation needs improvement as
well as a better tool besides CA.pl to help people use openssl in common
scenarios. I suspect there is a strong demand for creative private CA
support and we should have a friendly script or cookbook for this available
