>Do you really have to cut them up? I'd've thought multiple certs in one
>file would work.
That would be the way to go - it would be nice if you could just toss a
blob of data known to be an ASN-encoded certificate/cert-chain and the
crypto library would break it apart into its constituent pieces for you.
Back when I was struggling with the Netscape SSL3 reference implementation
(which was a nightmare, but let's save that for another forum) I wrote some
code that could do this, and would even tell the difference between an
NS-chain and a PKCS7-chain. They are just different enough to be
inconvenient. When I get a chance to learn the ASN library in OpenSSL, I'd
like to add this feature unless somebody comes up with a good reason not
to.
cjh
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
CJ Holmes It is completely configurable -
StarNine you just can't change the settings.
Senior Software Engineer
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
