hello
where i
put the  name of signature algorithm which i use it to sign a
certificate , cause in my config file i put only the MD5 function (but
it is a hash function and i can't use it to sign, am i wrong??). how can the 
verify function deduce which function to use .
in my sslcreat.pl
# create request config file (look please the bold underlined ligne )
sub create_ca_config_file {

    my ($file) = @_;

    open TMP, ">$file";
    print TMP "[ ca ]\n";
    print TMP "default_ca = CA_default\n";
    print TMP "[ CA_default ]\n";
    print TMP "dir = $ARAN_CA_DIR\n";
    print TMP "database = \$dir/index.txt\n";
    print TMP "new_certs_dir = \$dir/newcerts\n";
    print TMP "certificate = \$dir/cacert.pem\n";
    print TMP "serial = \$dir/serial\n";
    print TMP "private_key = \$dir/private/cakey.pem\n";
    print TMP "RANDFILE = \$dir/private/.rand\n";
    print TMP "\n";
    print TMP "default_days = $ARAN_CA_DAYS\n";
    print TMP "default_crl_days = 30\n";
    print TMP "default_md = md5\n";
    print TMP "\n";
    print TMP "policy = policy_any\n";
    print TMP "\n";
    print TMP "[ policy_any ]\n";
    print TMP "countryName = optional\n";
    print TMP "stateOrProvinceName = optional\n";
    print TMP "organizationName = optional\n";
    print TMP "organizationalUnitName = optional\n";
    print TMP "commonName = supplied\n";
    print TMP "emailAddress = optional\n";
    print TMP "\n";
    print TMP "[ req ]\n";
    print TMP "default_bits = 1024\n";
    print TMP "distinguished_name = req_distinguished_name\n";
    print TMP "prompt = no\n";
    print TMP "\n";
    print TMP "[ req_distinguished_name ]\n";
    print TMP "CN = ARAN CA\n";
    print TMP "\n";
    close TMP;

}

best regards
Téléchargez le nouveau Windows Live Messenger ! Téléchargez Messenger, c'est 
gratuit !
_________________________________________________________________
Sur Windows Live Ideas, découvrez en exclusivité de nouveaux services en 
ligne... si nouveaux qu'ils ne sont pas encore sortis officiellement sur le 
marché !
http://ideas.live.com

Reply via email to