May be you should try to write an applet which generates a key pair and a PKCS#10 request file which is send to a server delegated to certificate the public key without direct access to a command interpreter this brings a level of isolation of the private key. mmmm may be a active X with access to a CSP but this constrains the app to windows (ugly thing).
2010/1/14 Abbass Marouni <abbas...@hotmail.com> > > Bonsoir, > > I am a n ew user of the Openssl. > I have a project, in which I am asked to implement an online Certificate > Authority. > we will be using website hosted in a free server.(Geocities,...). > > so my Qs are the following: > > -is it possible to implement the CA online using a Geocities website. > -I need a simple website where users can send commands, and a certficate > will be generated for them. > > > Thanks. > > * > > > Abbass Marouni* > > > > ------------------------------ > Windows Live: Make it easier for your friends to see what you’re up to on > Facebook.<http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_2:092009> > -- "Hay que darle un sentido a la vida por el hecho mismo de que la vida carece de sentido."