Roberto Gallo wrote:
Hi,
I am writing some authentication software that will run in a embedded
environment, and thus requires ECC as primary public key algorithm.
This way, I would like to know if it is possible to generate an x509
certificate whose public key is an ECC key using OpenSSL command line.
yes but you need the cvs head (btw: this question has just been asked,
see the "How to generate ECDSA certificate ..." mail thread).
Does x509 support any kind of public key? If so, do I need extensions? Where
I can find x509 BNF definitions (free is better :-)?
have a look at rfc3280 (for x509 certs) and rfc3279 (for the public
key types).
Cheers,
Nils
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
