David Schwartz wrote:

Does openssl (9.0.9.7g or 0.9.8beta6) allow creating certs (signing others' public keys) without havign their private keys presented to the signer?

        Of course,

But how??? Creating a certificate request ("req") with openssl seems to require that private key is included! How do I avoid it?

How do I create a request that doesn't contain private key, and how do I sign it? Could you give me an example please?

[For having to bring private key along with the public key sort fo defeats the whole purpse PKI.]

        Exactly.
:-)
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to