I notice that when you create a X509 cert, you need to generate a key,
set the certs public key, and then sign it.
Is it correct to say that the EVP_PKEY instance passed into
X509_set_pubkey() for a given X509 cert MUST be the same as the
EVP_PKEY passed to X509_sign() with the same X509 cert?

In other words

X509 *x;
EVP_PKEY *pkA;
EVP_PKEY *pkB;

X509_set_pubkey(x,pkA);
X509_sign(x,pkB,EVP_md5());

pkA == pkB has to be true, correct?

Thanks

Jim C
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to