I notice that when you create a X509 cert, you need to generate a key, set the certs public key, and then sign it. Is it correct to say that the EVP_PKEY instance passed into X509_set_pubkey() for a given X509 cert MUST be the same as the EVP_PKEY passed to X509_sign() with the same X509 cert?
In other words X509 *x; EVP_PKEY *pkA; EVP_PKEY *pkB; X509_set_pubkey(x,pkA); X509_sign(x,pkB,EVP_md5()); pkA == pkB has to be true, correct? Thanks Jim C ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]