asked on

Create a CA within C using openssl

I'm trying to figure out how to out what headers and functions to use within my program for creating my own CA when the program runs through it setup.

Thank you for the help.

F. Dominicus

Well one of the mysteries is that besised it's importance the OpenSSL stuffi hopelessly under documented. I just can suggest getting the books "Network Security with OpenSSL" and SSL and TLS, and be very very patient and advanterous.

I guess you will have more luck just using the provided programs and use them via system....

Regards
Friedrich

chandrasuresh

The man pages of open ssl http://www.openssl.org/docs/apps/x509.html# reads clearly how to create a certificate (or CA). You can go through it and get a CA.

thomasbonham

ASKER

I have both of those books but I'm not able to find the information that I'm looking for within them.

I have also seen the link that you posted. I'm looking for how to do it within C itself. I'm not wanting to do system or anything else like that.

Thank you for the help.

chandrasuresh

You can use this command to create a CA:
openssl x509 -req -in careq.pem -extfile openssl.cnf -extensions v3_ca \
-signkey key.pem -out cacert.pem

thomasbonham

ASKER

Yes I have used the command line option of openssl many times. I need to do it within C itself. When I set it up on computers they will not have openssl install on them.

ASKER CERTIFIED SOLUTION

chandrasuresh

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial