> I have a private CA certificate created using openssl command line. > The issue is that the certificate expires on 19th Oct, 2007. > The question is that "Is it possible to extend the expiry of this > certificate without changing any other fields in the certificate?" > Basically, I want to continue using this CA Cert to sign end-user > certs for a longer time. > Any help will be appreciated. Thanks.
This question comes up a lot and I still have no idea what anyone is asking. It seems like it's largely a philosophical question, like am I the same person I was ten years ago even though only 1% of the molecules are the same. Some might consider the resulting certificate to be the original certificate with a later expiry date. Some might consider it to be a brand new certificate that just happens to share some common values with the previous certificate. What possible difference does it make whether you consider the resulting certificate a "new certificate" or "the original certificate with a later expiration date"? Or are you asking something else entirely? And if so, what? DS ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]