It seems all our certs being signed by the FreeIPA CA are given 2 year
expirations. We'd like to increase that to 5 years. I've added "-v 60"
to our certutil commands generating the CSRs, but the CA is still only
issuing 24 month certs.
What do I need to change to issue certs with longer lifetimes? We really
don't want to go around every 2 years and reissue certs...
Wrap Buddies InDemand <wrapbuddies.co/store> at http://bwortman.us/2ieQN4t
Manage your subscription for the Freeipa-users mailing list:
Go to http://freeipa.org for more info on the project