Sanjaya wrote:

I've been using OpenCA 0.9.0 and the CA certificate (which was self
signed
2 years ago) is about to expire.
Can anybody tell me how to generate a new CA certificate?
I'm also considering moving to the latest 0.9.1.4 OpenCA at the same
time. Any advice is welcome.

This question creates more questions then answers :)


Do you want to setup a new CA? It is not recommended to simply extend the lifetime of a CA certificate. It is recommended to setup a new key and CA certificate. This means it is recommended to setup a new CA. Bill explains several times the problems of such renewals. Perhaps we should add some lines to the recommendation area of the openca guide.

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to