Re: a simple ca question

2006-10-15 Thread Peter Sylvester
Bernhard Froehlich wrote: Chong Peng wrote: guys: how to tell a root certificate from a non-root certificate? i sthere a field in x509 structure for us to tell? thanks. Root certificates are self signed, that is the issuer equals the subject in the certificate. AND the signature can be

a simple ca question

2006-10-14 Thread Chong Peng
guys: how to tell a root certificate from a non-root certificate? i sthere a field in x509 structure for us to tell? thanks. chong peng __ OpenSSL Project http://www.openssl.org User Support

Re: a simple ca question

2006-10-14 Thread Bernhard Froehlich
Chong Peng wrote: guys: how to tell a root certificate from a non-root certificate? i sthere a field in x509 structure for us to tell? thanks. Root certificates are self signed, that is the issuer equals the subject in the certificate. Hope it helps, Ted ;) -- PGP Public Key Information

RE: a simple ca question

2006-10-14 Thread Chong Peng
. chong peng -Original Message- From: Bernhard Froehlich [mailto:[EMAIL PROTECTED] Sent: Saturday, October 14, 2006 1:10 PM To: openssl-users@openssl.org Subject: Re: a simple ca question Chong Peng wrote: guys: how to tell a root certificate from a non-root certificate? i sthere a field

Re: a simple ca question

2006-10-14 Thread Bernhard Fröhlich
Chong Peng schrieb: thanks for the reply. so that can i say that if a certificate is self signed, then it is a root certificate. I'm not really sure if the definition of a root certificate also assumes that the CA basic constraint is also set, which would allow the certificate to be used as