Hi, > I posted this message on the users list, but I had no replies till > now. > > If I have a Self-signed CA Certificate with a valid period of 365 > days. > > I know the procedure to renew user certificates but: > how can I renew the CA-Certificate before the expiration? > > If I replace it with another CA Self-Signed Certificate ussing the > same key: > Will all the issued user certificates still be valid? > Is there any command to do it? > > Please, any help on this topic will be wellcome.
no answer because the topic is really not trivial. I wrote a concept for the future CA rollover process to be supported by a future OpenCA release. You can find the description in the OpenCA 'strategy' section of the appendix in the OpenCA guide. It's not in the 0.9.2 branch, you will have to access the CVS directory to get it. Really, there is no short answer on this. Martin ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://ads.osdn.com/?ad_ide95&alloc_id396&op=click _______________________________________________ OpenCA-Devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-devel
