> Thank you…
> I did it but I think that is too difficult for me without
> explications of functions and structures and…... There isn’t
> a “manual” (guide?) or a document about this functions?

> Regards

I would very strongly advice you to find a knowledgeable security expert to
assist you. What you are trying to do is simple in principle but complex in
implementation and if you do something wrong, things may appear to work but
the security you are expecting to get may not actually be there.

You cannot just drop a secure library into a project and get a secure
result. You have to know exactly what you're doing and what the implications
of what you do are.

I honestly believe that helping people to just "get it done" in situations
like this is harmful.

For example, once you get what appears to be a valid certificate, do you
know how to analyze every field in the certificate to make sure you actually
generated the certificate that does what you expect it to? Do you know how
to configure the certificate so that it can't be used for purposes other
than those intended?

I would recommend you find a web page explaining how to issue certificates
with OpenSSL and use the built-in capabilities of the command line tool. If
you follow someone else's recipe, you are much less likely to build
certificates that don't do the right thing. I would still recommend you get
an expert to at least examine one of your certificates (and the process by
which you generate requests if you do that too) if this is a "real"
application.

DS


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to