Hi Patrick, Regarding all Openssl functions, since the encryption and authentication methods used here are a common knowledge, you must use a unique password in order to protect your own data. Otherwise, everybody will be able to figure out your information out of the "encrypted" file. Anyway, using the password, no one else can "still" your certificate. -- Thanks Neta ============================================================== Neta Shmueli RADGUARD Ltd. Atidim Technological Park, Building 4, Tel Aviv 61581, ISRAEL. Main: +972 3 7657999 Direct: +972 3 7662813 Fax: +972 3 6442366 mailto:[EMAIL PROTECTED] http://www.radguard.com ============================================================== Patrick Li wrote: > Hi, > > When creating a client certificate using command "CA.pl -newreq", it prompts > for entering a PEM pass phrase before generating the newreq.pem file. What > is the usage/purpose of this password? It seems to me that it is the > password for accessing data (like private key?) in the newreq.pem file. Is > it correct? > > Thanks > Patrick > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED]
begin:vcard n:Shmueli;Neta x-mozilla-html:FALSE adr:;;;;;; version:2.1 email;internet:[EMAIL PROTECTED] fn:Neta Shmueli end:vcard