> I have a private CA certificate created using openssl command line.
> The issue is that the certificate expires on 19th Oct, 2007.
> The question is that "Is it possible to extend the expiry of this
> certificate without changing any other fields in the certificate?"
> Basically, I want to continue using this CA Cert to sign end-user
> certs for a longer time.
> Any help will be appreciated. Thanks.

This question comes up a lot and I still have no idea what anyone is asking.

It seems like it's largely a philosophical question, like am I the same
person I was ten years ago even though only 1% of the molecules are the
same.

Some might consider the resulting certificate to be the original certificate
with a later expiry date. Some might consider it to be a brand new
certificate that just happens to share some common values with the previous
certificate.

What possible difference does it make whether you consider the resulting
certificate a "new certificate" or "the original certificate with a later
expiration date"?

Or are you asking something else entirely? And if so, what?

DS


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to