In reply to you both, the PHP part I got down..that's not the problem.
It's what to tell openssl to do.  I'm trying now to make a cnf file to
make a CA without prompting, then to make a certificate req and sign it
without prompting...at least now I know I'm in the right direction.

Thanks!
--Brian

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Thomas J. Hruska
Sent: Tuesday, August 23, 2005 15:59
To: openssl-users@openssl.org
Subject: Re: Automation question

Oliver Leitner wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: RIPEMD160
> 
> McCann, Brian wrote:
> | Hi all...I'm new to the list and for the most part OpenSSL as
well...so
> | sorry if I use the wrong terminology.  I've searched the list
archives,
> | as well as Google, and cannot figure this out.  I'm trying to create
a
> | CA certificate, as well as certificates for users using a script
(called
> | from a web browser).  For the life of me, I cannot figure out how to
> | send the "openssl req" and "openssl ca" command the answers to the
> | questions it needs (O,OU,State,etc) through a text file or std
in...I'm
> | sure this is possible...I just can't find how!  Any help would be
> | greatly appreciated!
> |
> | Thanks,
> | --Brian McCann
> |
> |
> |
______________________________________________________________________
> | OpenSSL Project
http://www.openssl.org
> | User Support Mailing List
openssl-users@openssl.org
> | Automated List Manager
[EMAIL PROTECTED]
> |
> |
> 
> you could use the system(); command from php for one, on the other
hand,
> you may want to try to run some background cgi....
> 
> theres plenty of ways to call commands from a webpage...
> 
> Greetings
> Oliver

That didn't answer the OP's question.  You should specify what platform 
you are working under.  Under Windows, using stdin to fill in the fields

is difficult (if not impossible) because the password field does not use

stdin but rather the Console APIs.

Personally, I think there should be a command-line option to define 
those fields in a URL-encoded format.  That would go a long way to 
eliminating the .cnf files, which, under Windows, are considered to be a

special file type such that they can't be opened in notepad very easily.

--
Thomas Hruska
Shining Light Productions

Home of BMP2AVI, Nuclear Vision, ProtoNova, and Win32 OpenSSL.
http://www.slproweb.com/

Ask me about discounts on any Shining Light Productions product!
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to