Is there something I could add to the following commands to change the
default time a CA is good for? The ones I created are good for only 30
days. I would like to have them be good for 1825 days.
"To create the CA.pem and privkey.pem"
openssl req -out CA.pem -new -x509
"To sign the server cert"
openssl x509 -req -in server.req -CA CA.pem -CAkey privkey.pem -CAserial
file.srl -out server.pem
When I use the openssl.cnf file my server cert does not work with
Netscape.
Thanks in Advance,
Brandon
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]