On Mon, Jul 04, 2005, Uri wrote:

> Dr. Stephen Henson wrote:
> 
> >On Sun, Jul 03, 2005, Uri wrote:
> >
> > 
> >
> >>How do I create a request that doesn't contain private key, and how do I 
> >>sign it? Could you give me an example please?
> >>
> >What makes you think the private key is included?
> > 
> >
> 
> The fact that Windows XP machine (into which I load the created cert) 
> claims to now have the private key for it.
> 

If you are importing the certificate via a PKCS#12 file then its that which
will include the private key, not the request.

PKCS#12 isn't an appropriate format to just import a certificate. You need
to use PEM or DER form and an appropriate extension such as .crt.

If this certificate is to be used in an SSL server you shouldn't import it
anyway, just the root CA certificate is sufficient.

Steve.
--
Dr Stephen N. Henson. Email, S/MIME and PGP keys: see homepage
OpenSSL project core developer and freelance consultant.
Funding needed! Details on homepage.
Homepage: http://www.drh-consultancy.demon.co.uk
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to