Janis Pinkis wrote:
Why you want to wait one year?I'm just playing around with the OpenCA, and i'm newbiw in PKI too, so may be my questions are too stupid. I just made wrong certificates, with wrong Subject Alternative Names, is there a way to change them, without a making new certificates, or i have to make new ones and wait a year, till wrong certificates are gone?
Do you want to use the same DNs? Then revoke the wrong certificates and issue new ones.
Do you want to use the same private key? Then renew the archived request of the wrong certificates.
You cannot simply remove an object which was signed by the CA because it has a valid signature.
Michael
P.S. please reply to the list. Sourceforge doesn't set the reply-to so you must do it manually or use "reply all" and remove my mailaddress.
--
-------------------------------------------------------------------
Michael Bell Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter Email: [EMAIL PROTECTED]
Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482
Unter den Linden 6 Fax: +49 (0)30-2093 2959
10099 Berlin
Germany http://www.openca.org
-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
