Hi, The following scenario. I'm running a company that sells software. When selling software to a new client I create a certificate for that client and sign it using my company's root certificate. The software in turn on startup checks if the client's certificate was signed by my company, by matching it against root.pem which contains my company's cert. However, when the client alters the root.pem, or creates its own CA and puts that one in root.pem, all will be lost :) Is there any way to bypass this ? Has anyone done a thing like this before ?
Thanks ! ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]