Newbie questions

Hello,
We have been gradually figuring out how to use SFL and seem to be able to
get signing to work (after we picked up on the need to use
CSM_CSInst::SetApplicable() as per an earlier reply in the archive).
However, we still have a number of questions we can't seem to figure out
from the doco or a trawl through the archives.

First question is - is there a FAQ? Or a collection of really simple
snippets that do some basic things (sign, verify would probably be enough).
The scope of the overall SFL libs means that it is hard to get a handle on
things to start off with, but I don't want to pester the list for help with
"trivial" problems.

We are trying to produce a cross-platform system (Linux and Windows) using
the free3 CTIL and RSA (algorithm, not BSAFE). Among other things, we need
to be able to produce a root CA cert and then issue further certs with
this.We want to do this on both Linux and Windows platforms. The main areas
we are not clear on at this stage are:

Is it possible to generate RSA keys using SFL with the free3 CTIL rather
than using openssl tools to produce them in PKCS12 format? I don't seem to
be able to find anything on key generation in the doco (or by digging about
in the code)?

I also noted that there are some issues with producing certificates - we
have been trying to figure out how to do so (unsuccessfully so far). We have
considered approaching this from various levels and have the following
questions:

Can the CertificateBuilder app actually produce (RSA) certs without an
existing cert using free3 CTIL?

I don't really understand what the GUI requires be filled in to actually
produce a cert or where it looks for the signature to issue the cert for
and/or the issuer's login info? I hear mention of a non-GUI
CertificateBuilder? Does this actually exist?

Lastly, there is something horrible happening to the stack when we do:

somefunc()
{
  int result = -1;
  char inputfile[] = "inputfile.txt"
  char outputfile[] = "outputfile.txt"

 // stack ok

 CSM_AppLogin login("libsm_free3DLL", "sm_free3dll newcert.p12 password");

 // outputfile[] corrupted
 // ....

}

This is on a Linux box - have yet to try on Windows. Is there something we
are doing wrong here?
 
Darryl Green
Project Manager, Realtime Systems
TAB Queensland Limited