If the private key is given away, the the certificate is useless, and does not protect anything it signs.

As you seem very smart, how do you renew a certificate with openssl when you are a CA?

Cheers.

On 02 Nov 2001 09:33:19 -0800, Michael Sierchio wrote:
> > Franck Martin wrote:
> > 
> > I agree with you. I will make the modification. Yes the CA root certificate should be protected.
> 
> No, you still don't have a clue -- you don't protect a certificate, it's
> essentially a public document.  You protect the private key.
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]



Reply via email to