In message <[EMAIL PROTECTED]> on Thu, 12 Jun 2003 07:42:46 -0700, Michael Sierchio 
<[EMAIL PROTECTED]> said:

kudzu> Fiel Cabral wrote:
kudzu> 
kudzu> > But if the certificate is a sub CA certificate, then is
kudzu> > there a way to find out? Are X.509 v1 or v2 sub CA
kudzu> > certificates common?
kudzu> 
kudzu> V2?  Fickt nicht mit der raeketenmensch!  Perhapssss you mean
kudzu> to say V1 or V3?

v2 exists, but has seldom been used in real life...

kudzu> If the cert is a sub-CA cert then it is not self-signed.
kudzu> Unless there is some quantum subtlety that I am missing
kudzu> here.

I don't think that was a question either.

The answer is that no, there is no way to distiguish sub-CA
certificates from user certificates (i.e. v1 and v2 user certificates
can be used as sub-CA certificates).

-- 
Richard Levitte   \ Tunnlandsvägen 3  \ [EMAIL PROTECTED]
[EMAIL PROTECTED]  \ S-168 36  BROMMA  \ T: +46-8-26 52 47
                    \      SWEDEN       \ or +46-708-26 53 44
Procurator Odiosus Ex Infernis                -- [EMAIL PROTECTED]
Member of the OpenSSL development team: http://www.openssl.org/

Unsolicited commercial email is subject to an archival fee of $400.
See <http://www.stacken.kth.se/~levitte/mail/> for more info.
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to