As I understand, this is not* a bug. The .pem file containing the RSA
key in the cert is there for testing pourposes... not for production.
The README file says that you should create your own private key. Think
that this is the server side cert file (with the public and private
key), and must be secret for your servers to make your VPN SSL network. escribió:
cite="mid62852. .198"
Hello there

This might have been adressed before, but I didn't find anything relavant
in the archivies. This bugreport reveals that certs/* inside the openssl
source tarball contains some private RSA keys. Is that done on purpose,
and if so, why?

Stian Skjelstad
__________________________________________________ ____________________
OpenSSL Project
Development Mailing List">
Automated List Manager