On Wed, Jun 23, 2010, Harshvir Sidhu wrote:

> Hi All,
>     I am trying to read Certificates and Private Key from Windows
> Certificate Store and then using them in OpenSSL. I am able to read
> Certificates but i am having trouble with reading Private Key. Have anyone
> done this before, any pointers will be great. Thanks.
> 

Depends on what you want to do with the key. If you want to use it for SSL/TLS
client authentication then you can use the CryptoAPI ENGINE to pick an
appropriate certficate and key and use them directly. You just have to set the
SSL client authentication ENGINE to "capi".

For other purposes you can load the private key from the capi ENGINE using
ENGINE_load_private_key(). The string you pass by default is a substring of the
certificate name e.g. if it has CN=steve then "steve" will do.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to