Re: couple of certifcate usage questions

2006-04-16 Thread star_night
Nelson, Thank you, that did clarify a lot. One follow-on question... Does the trust flags always override certificate type and extensions? For instance, if a certificate did not have the "basic constraint" extension needed for CA certifcate and if that certifcate's trust were modified to be a

Re: couple of certifcate usage questions

2006-04-14 Thread Nelson B
[EMAIL PROTECTED] wrote: > Sorry if this has already been answered, I searched for an answer > before asking. > > 1. What should be trust args for a self-signed certifcate, that needs > to be used as a server cert? Should that be valid peer or trusted peer? or both? Those are separate flags,