The following procedure generates self-signed RSA certificates. It is included for completeness, but is not necessary for using SSLeay. In particular, note that the file names given here would overwrite the DSA CA key and certificate generated in the previous sections. There is no automated method for revoking certificates. The first column of the relevant row should be changed from V to R and a date, in the same format as column2, added as column 3.
Field separators are tab characters.
By default, SSLeay does not check CRLs when verifying certificates. Details of how to do this were posted to the ssl-users group by Douglas E. Engert and are archived here . Further Help Please report any errors in this document to Intertrader . Note on random numbers from Clifford Heath. The patch referred to in the post archived above.