On Thu, Jun 4, 2009 at 11:48 AM, Michael S. Zick <[email protected]>wrote:

> On Thu June 4 2009, Lucas Mocellin wrote:
> > Hi,
> >
> > I'm sorry, I don't understand very much about, but let's try.
>
I'm starting to learn.

>
> >
> > On Thu, Jun 4, 2009 at 11:23 AM, Michael Sierchio <[email protected]
> >wrote:
> >
> > > Lucas Mocellin wrote:
> > >
> > > > I would like to generate a certificate valid in hours, does someone
> know
> > > > how to do it? is that possible or I have to manage this hours "by
> > > myself"?
> > >
> > > Why?  What kind of cert? What is the intended use for the cert?  If
> it's
> > > for
> > > the purposes of restricting access to a given time window, use a
> different
> > > mechanism.
> >
> > yes that's the purpose, the 'kind' of certificate is flexible.
> >
> > How do you think I could do differently? I need authenticate someone just
> > for a few hours (1-3 hours) and then close the connection, I thought to
> it
> > with certificates to "let" the certification system manage that for me.
> >
>
I want authenticate someone, and THEN authorize him for a while to do
something.

>
>
> Although the protocols do renogate the connection on a regular basis;
> I would be very surprised if that includes re-authentication, only keys.

 hmm.. it's interesting.. I thought, for example, OpenVPN should 'manage'
this certificate expiration.

>
>
> You'll have to do it locally on the server - like teach the server to
> start a cron job that will, after 1-3 hours - dump the user.

If it's necessary, it'll be done, but I would like to avoid this work.

if you're available and if you have any IM (google talk, MSN, *) please let
me know.

PS: I'm undergradute student and this is for a project.

Thanks a lot,

Lucas.

>
>
> Mike
> > Thanks,
> >
> > Lucas.
> >
> > >
> > > ______________________________________________________________________
> > > OpenSSL Project                                 http://www.openssl.org
> > > User Support Mailing List                    [email protected]
> > > Automated List Manager                           [email protected]
> > >
> >
>
>
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    [email protected]
> Automated List Manager                           [email protected]
>

Reply via email to