Is there something I could add to the following commands to change the
default time a CA is good for? The ones I created are good for only 30
days. I would like to have them be good for 1825 days. 

 "To create the CA.pem and privkey.pem"
    openssl req -out CA.pem -new -x509

"To sign the server cert"
openssl x509 -req -in server.req -CA CA.pem -CAkey privkey.pem -CAserial
file.srl -out server.pem 

When I use the openssl.cnf file my server cert does not work with
Netscape.

Thanks in Advance,

Brandon

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to