Hi,

I am running a HostAPD server on openSUSE and I am having some problems with
certificates. The reason why I have set up this server is for learning and
testing purposes.

I am using my nokia (n95) phone to connect to the Internet and
authenticating via the HostAPD server. I am using openssl to create
certificates on the same server

The thing is that my Nokia phone has support for following cipher suites:

RSA, 3DES, SHA
RSA, AES, SHA
RSA, RC4, MD5
RSA, RC4, SHA
DHE-RSA, 3DES, SHA
DHE-DSS, 3DES, SHA
DHE-RSA, AES, SHA
DHE-DSS, AES, SHA

The four first cipher suites are no problem. I have created certificates for
them to work and it works, but the problem is with the DHE certificates. As
far as I have been able to learn is that the DHE-RSA cipher suites use DH
for key exchange and RSA for authentication, and the DHE-DSS cipher suites
use DH for key exchange and DSA for authentication.

So my problem is creating the right certificates and keys with openssl for
DH key exchange with RSA and with DSA.

I would de more than thankful if anyone can tell me how to create this in
openssl.

Best regards,
Majd