diff options
| author | Rob Austein <sra@hactrn.net> | 2007-12-24 07:34:33 +0000 |
|---|---|---|
| committer | Rob Austein <sra@hactrn.net> | 2007-12-24 07:34:33 +0000 |
| commit | 3b26727b8b5c48e783be35cc821193aa4086d48b (patch) | |
| tree | a6a7f0536bf1a0b763dff1d855cccd6ee31da25d | |
| parent | 1ea8b998329d9532e583f530f97184e3c20b3ee6 (diff) | |
Biz cert SKI/AKI
svn path=/scripts/README; revision=1436
| -rw-r--r-- | scripts/README | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/scripts/README b/scripts/README index e7e3f397..5ea8d9d4 100644 --- a/scripts/README +++ b/scripts/README @@ -294,3 +294,10 @@ If the Python implementation ends up becoming the production version of the engine rather than just a prototype, it might make sense to revisit this, as the current mess of crypto libraries smells like an accident waiting to happen. + +Biz certs currently used by test scripts don't include SKI or AKI. I +think this is because the test scripts use "openssl x509" rather than +"openssl ca" when generating these certs. Not critical, and will +probably become completely irrelevant when RobK supplies the +all-singing all-dancing biz cert scripts, but should not be a big +problem to fix either if it gets in the way again. |