Hi, I was trying to convert my self created root public key into pkcs12 format for inclusion in browsers. I tried the following:
openssl pkcs12 -export -nokeys -in demoCA/cacert.pem -out cacert.pfx This failed, demanding the private key. So then I tried: openssl pkcs12 -export -nokeys -in demoCA/cacert.pem -inkey demoCA/private/cakey.pem -out cacert.pfx This succeeds but seems to leave the private key in the output file. Further experimenting with adding -cacerts did not seem to help. I'm I just trying to do the wrong thing here or is this a bug? I am using openssl 0.9.6b. Thanks, skd ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]