Hello, Using openssl 0.9.2b's CA.sh, I generated a private key and a certificate for myself. But I found that I can use the private key to both encrypt and decrypt the message, which is contrary to my understanding. Also I want to use openssl to generate a pair of public key/private key for me. and then use the public key to generate a certificate request for me to send to a CA, like verisign. how to get this done via openssl command line? I couldn't figure out by looking into the available docs and by myself. Also, I intent to make the public/private key and X509 certificate from openSSL inter-operatable with the security API of Java 2, any suggestions on it? Thanks, Renjie ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]