Hi,

This solution was interesting but it seems that I need the private key of
the user certificate to sign the request (and unfortunately it was created
and stored in the client browser).

openssl x509 -x509toreq -in cert.pem -out req.pem
Getting request Private Key
no request key file specified

It seems I have no other choice but to keep the request files to renew
certs.

Maxime.



> Maybe you can also try to generate a new request from an expired
> cert.
>
> openssl x509 -x509toreq
>
> > I think renewal is interesting because  [...]
>
> It's always a matter of your local policy.
>
> Ciao, Michael.
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [EMAIL PROTECTED]
> Automated List Manager                           [EMAIL PROTECTED]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to