Hi, I noticed two minor things concerning certificate validity:
The RA frontend allows to modify the certificate lifetime only relative basis, i. e. when modifying the CSR the RA administrator can only enter a number of days the certificate will be valid. Often it is desirable to have an absolute notAfter date (sometimes even a notBefore date that is not 'now'). In my case I found myself calculating the number of days till the desired expiry date. I'd really love to have the possibility to enter an absolute date here. In addition, I noticed that the number of dates specified in the RA interface are counted from the date of issuance by the CA. In my case, I wanted a certain notAfter date, entered the desired number of days, but issued the certificate some days after the approval. The number of days were added to the time when issuance happened, this led to a validity that extended my absolute validity. cheers, Martin ------------------------------------------------------- This SF.Net email is sponsored by OSTG. Have you noticed the changes on Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now, one more big change to announce. We are now OSTG- Open Source Technology Group. Come see the changes on the new OSTG site. www.ostg.com _______________________________________________ OpenCA-Devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-devel
