Hi Michael,

You are refering to the database table "request", right? Finally got it.
Sooo...noo, there is no field "cert_notafter" or the like in the request
table of my mysql database. The DB-logfile shows me, that the request header which was stored actually contains the CERT_NOTAFTER field with the intended value. Is a field "certn_notafter" in the request table necessary?

The table request, field data must contain something like this:
-----BEGIN HEADER-----
TYPE = PKCS#10
RA = BATCH SYSTEM
SERIAL = 640
NOTBEFORE = Wed Aug 10 15:12:42 2005 UTC

CERT_NOTAFTER = 061001000000 <<<<<<<<<<<<<<<<<<<<<<<THIS MuST BE HERE

PIN = 1dbe2d8f933bb402427518c569b76436b402056b
SUBJECT = CN=Thomas Tester,OU=Student,OU=myTUM CA,O=Technische Universitaet Muenchen,C=DE
SUBJECT_ALT_NAME = email:[EMAIL PROTECTED]
LOA = 40
-----END HEADER-----

If there is no "CERT_NOTAFTER" field, the validity interval is set by the openssl config when issuing. So you can of course change this in the openssl.config but it will affect all certificates of this role.

Oliver
--
Diese Nachricht wurde digital unterschrieben
oliwel's public key: http://www.oliwel.de/oliwel.crt
Basiszertifikat: http://www.ldv.ei.tum.de/page72

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to