Re: a simple ca question

2006-10-15 Thread Peter Sylvester
Bernhard Froehlich wrote: Chong Peng wrote: guys: how to tell a root certificate from a non-root certificate? i sthere a field in x509 structure for us to tell? thanks. Root certificates are self signed, that is the issuer equals the subject in the certificate. AND the signature can be ve

Re: a simple ca question

2006-10-14 Thread Bernhard Fröhlich
Chong Peng schrieb: thanks for the reply. so that can i say that "if a certificate is self signed, then it is a root certificate." I'm not really sure if the definition of a root certificate also assumes that the CA basic constraint is also set, which would allow the certificate to be used as

RE: a simple ca question

2006-10-14 Thread Chong Peng
? thanks. chong peng -Original Message- From: Bernhard Froehlich [mailto:[EMAIL PROTECTED] Sent: Saturday, October 14, 2006 1:10 PM To: openssl-users@openssl.org Subject: Re: a simple ca question Chong Peng wrote: > guys: > > how to tell a root certificate from a non-root cert

Re: a simple ca question

2006-10-14 Thread Bernhard Froehlich
Chong Peng wrote: guys: how to tell a root certificate from a non-root certificate? i sthere a field in x509 structure for us to tell? thanks. Root certificates are self signed, that is the issuer equals the subject in the certificate. Hope it helps, Ted ;) -- PGP Public Key Information

a simple ca question

2006-10-14 Thread Chong Peng
guys: how to tell a root certificate from a non-root certificate? i sthere a field in x509 structure for us to tell? thanks. chong peng __ OpenSSL Project http://www.openssl.org User Support Maili