The O'Reilly OpenSSL book - in some examples but not others - cat's the
certificate and key together and then just uses that one file as both
certificate_chain_file and PrivateKey_file.

cat servercert.pem serverkey.pem > server.pem

Is that okay? It does seem more convenient to only have one file to keep
track of. Am I correct in assuming that OpenSSL is smart enough to send the
certificate down the wire but not the key?

I assume it is but where the private key is such a critical link in the
security chain I thought I'd ask.

Thanks for humoring me,
Charles 


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to