From 3b26727b8b5c48e783be35cc821193aa4086d48b Mon Sep 17 00:00:00 2001 From: Rob Austein Date: Mon, 24 Dec 2007 07:34:33 +0000 Subject: Biz cert SKI/AKI svn path=/scripts/README; revision=1436 --- scripts/README | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'scripts') diff --git a/scripts/README b/scripts/README index e7e3f397..5ea8d9d4 100644 --- a/scripts/README +++ b/scripts/README @@ -294,3 +294,10 @@ If the Python implementation ends up becoming the production version of the engine rather than just a prototype, it might make sense to revisit this, as the current mess of crypto libraries smells like an accident waiting to happen. + +Biz certs currently used by test scripts don't include SKI or AKI. I +think this is because the test scripts use "openssl x509" rather than +"openssl ca" when generating these certs. Not critical, and will +probably become completely irrelevant when RobK supplies the +all-singing all-dancing biz cert scripts, but should not be a big +problem to fix either if it gets in the way again. -- cgit v1.2.3