On Oct 24, 2011, at 9:16 AM, Lukasz Lacinski wrote: > A CA certificate in Globus Simple CA is generated for five years by default. > How to renew the certificate when it expires? > > Thanks, > Lukasz
This isn't something that can be done with the globus-simple-ca scripts. However, the openssl command can do it. I think something sort of like this: openssl req -key ~/.globus/simpleCA/private/cakey.pem -new -x509 -days $((365 * 5)) -out /tmp/newca.pem -config ~/.globus/simpleCA/grid-ca-ssl.conf The path names might not be right for the conf file, I was basing this on 5.1.1. Joe
