John Sutton wrote:
>
> Hi again
>
> Another couple of minor questions:
>
> 1) In ssleay.cnf in Ben's distribution, he sets the default country code to GB:
>
> countryName_default = GB
>
> Is this merely a Republican sentiment, or is there a another good reason
> (not that Republicanism isn't a good one ;-) why this is to be preferred to
> the more usual "UK"?
Certs are X509 gadgets. X509 is an ISO standard. The ISO for GB is, err,
GB. UK is the Ukraine.
> 2) What is this strange business of generating a odd named soft link to a
> key file:
>
> dd948bac.0 -> ../SSLconf/conf/httpsd.pem
>
> Is this necessary? desirable? why?
It may not be necessary, but it is how SSLeay looks up CA certs. The
name of the file is a hash of the cert.
Cheers,
Ben.
--
Ben Laurie |Phone: +44 (181) 735 0686| Apache Group member
Freelance Consultant |Fax: +44 (181) 735 0689|http://www.apache.org/
and Technical Director|Email: ben@algroup.co.uk |
A.L. Digital Ltd, |Apache-SSL author http://www.apache-ssl.org/
London, England. |"Apache: TDG" http://www.ora.com/catalog/apache/
WE'RE RECRUITING! http://www.aldigital.co.uk/recruit/