On Thu June 4 2009, Lucas Mocellin wrote:
> Hi,
> 
> I'm sorry, I don't understand very much about, but let's try.
> 
> On Thu, Jun 4, 2009 at 11:23 AM, Michael Sierchio <[email protected]>wrote:
> 
> > Lucas Mocellin wrote:
> >
> > > I would like to generate a certificate valid in hours, does someone know
> > > how to do it? is that possible or I have to manage this hours "by
> > myself"?
> >
> > Why?  What kind of cert? What is the intended use for the cert?  If it's
> > for
> > the purposes of restricting access to a given time window, use a different
> > mechanism.
> 
> yes that's the purpose, the 'kind' of certificate is flexible.
> 
> How do you think I could do differently? I need authenticate someone just
> for a few hours (1-3 hours) and then close the connection, I thought to it
> with certificates to "let" the certification system manage that for me.
> 

Although the protocols do renogate the connection on a regular basis;
I would be very surprised if that includes re-authentication, only keys.

You'll have to do it locally on the server - like teach the server to
start a cron job that will, after 1-3 hours - dump the user.

Mike
> Thanks,
> 
> Lucas.
> 
> >
> > ______________________________________________________________________
> > OpenSSL Project                                 http://www.openssl.org
> > User Support Mailing List                    [email protected]
> > Automated List Manager                           [email protected]
> >
> 


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [email protected]

Reply via email to