[EMAIL PROTECTED] wrote:
Hi Nils,
Appreciate your kind help.
I just want to generate the ECC certificate in command line, use it for a web server.

use apps/ecparam.c to create a private ec key or just ec parameters (see ecparam manpage [1]) and then use this key/params in "openssl req -newkey ec:params.pem ..." etc. (once you have a private key the type of that key shouldn't really matter anymore, as this is mostly hidden from the normal user).

I also want to set up the environment to test ECDH key agreement.
Thanks in advance.

using "openssl s_server ..." you can do this by choosing an appropriate ec cipher via the "-cipher" option (for a list of supported ec ciphers see ssl/tls1.h).

Cheers,
Nils

[1] there are some typos in the manpage: in the examples section
    "ec" should be replaced by "ecparam" .... will fix it.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to