It seems all our certs being signed by the FreeIPA CA are given 2 year expirations. We'd like to increase that to 5 years. I've added "-v 60" to our certutil commands generating the CSRs, but the CA is still only issuing 24 month certs.

What do I need to change to issue certs with longer lifetimes? We really don't want to go around every 2 years and reissue certs...

*Bret Wortman*
Damascus Products
ph/fax: 1-855-644-2783
Wrap Buddies InDemand <> at
Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to