Hi, there are some recommened methods for creating a ca-bundle.crt.... most use the openssl commandline with something like: openssl x509 -fingerprint -text -in infile -inform PEM >> outfile which produces a bunch of text info beside the PEM certs itself. Now I would like to know: - is anything of the text info relevant for the CA lookup for openssl? - is the lookup faster if I ommit the text info, and only write out the PEM certs? - is the fingerprint of any use for the lookup process?
F.e. if I create a ca-bundle.crt with text info the file is ~542kb (114 CAs); if I create a ca-bundle.crt without text then its only ~183kb... Thanks, Guenter. ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [email protected] Automated List Manager [EMAIL PROTECTED]
