use /usr/lib/ssl/misc/CA.sh

• ...CA.sh -newca (creates the ca in demoCA)
• ...CA.sh -newreq (creates the req)
• ...CA.sh -sign (signs it)
• openssl pkcs12 -export -in newcert.pem -inkey newreq.pem -certfile demoCA/cacert.pem -out winhost.p12 (packs it in a PKCS12)
• openssl x509 -in newcert.pem -noout -subject (gets the id this should match what is given in ipsec.conf)

More:

Went to FL last week, did some work, and saw DW, nice vacation. I moved to the suburbs now kinda, a house in a neat part of town.

I got the network working, put the Linux box back as Samba PDC (I stopped doing that when I was carrying the boxes around), got the printer working OK with drivers downloaded (all I did was cupsaddsmb... but I might have done part of it before since the share was moved from FreeBSD).

There is a way to use pointer in C# if you use "unsafe" code however it seems to work reliably only for real simple thing (one level of indirection, no pointer arithmetic, etc). I added a couple functions to the sql dll so that I could use them instead to access the string data (use a stringbuilder to provide a buffer for the string). Looks like it's working OK, so now I can use sqlite on CE (the DLL has to be recompiled for each platform, though)

So I have been working most of today to get the SQLite working from .net. Here are a few conclusions: