On Thu, Dec 05, 2013 at 06:25:46PM +0100, Adnan RIHAN wrote: > I?m the the primary dev, I don?t have *the mysterious* script > which would generate all these cert, is there a way to expand the > validity of existing certificates?
Since I had most of the code lying around, enjoy! Create a PEM file starting with an issuing CA's private key followed by a list of certificates signed by that CA (including the CA itself if self-signed and expired). Then run the attached program with the pem file as argv[1]. The output will be a list of re-signed certs. Only the start date, end date and signature change. If you need configurable validity intervals, you'll have to enhance the code. Note, some error checks have been left out, so it may crash under adverse conditions (input certs with unsupported digest algorithms, out of memory errors, ...) -- Viktor. begin 644 re-sign.c.gz M'XL("+K9H%(``W)E+7-I9VXN8P"E5WMO$T<0_]O^%$L0X<XXQ*2T@AB0#!B4 M8NS(3JL@&JW.=WOV)O?2[ADWA7SWSLSNWIT?32O52N+<[,SL/'[SN(<R"Y-5 M)-@K748R?[I\TW[8)"5RODU3,EMLTH12V99H7HA,Z^3XSY][+_>?%"+=?S#? M-L,=P#5XT#[NL`*,*#D0<J79D7ED01:Q,!&!8N52,#IDN@S"&]8Y;K>_Y3)B M\&F*>DCTV]_;>+#*M%QD(F))GBU0O$_D<`D*X3-?Q;%07Y_U3IY?V9,\TZ4Y M[\0R$;O4*"@#0T7[\)/(3&Q2XB18Z/X>"\JE$D'4;].1>6"OV;OIE_.+"3?/ M7$:>;V372["`>1[8#5S#Z90OA'63XZ4<;?$.T<XN.T0*?"$-OL@$WV</7K.> MS[ZW6RAN1$VZ>89ZNS8&7:;E7R*//?/H@P4M&3./U+!#NOSB\H+/+J9GXX]^ MNT5N4MQC#S!%J@Y"=5N4.01DK@)U"VG)YXE(3]FC9'7Z2--/A'__R`ZZ[5:K M#D)MAG'&^(*NH"$BT>+_W/B?KK,QOVO?$1K?K]*"A4*5,I9A4`H-R64!.Q]^ M)IFGA#]`8BE#1C!4@F.F.<IHKXD8I*",`^6'L]$0OCIQL8'&3A:D`O+<VZ0N MP5ZA:CKA"#ZF%G;(B<@VL:A$67-5:*RQ7!^^/9N01`>JM=]JM2`*2%JKH"C` M@IA*+\I7)?J.C,/?S_GYI^$7UD&M-^+6Z#+7`WB<X^PUT-F/'W4HB`(H`N-6 M*FN(>'$!2F)L#Y4XI%D=`)1!9OS;:$1HW@&""0?*2:PSM=+8/,(E$%$'($+C M+P&A5@RE0((>M3M"O3/)@(&^$`YY]KB$6!:Y*EF>1"P3:UW%`8J#FI0I,"Q? MHD,<P1F((0=N'A>>"5^72./)N]%D-G2\MM8!7QP1"G&`(D9$P)>!0%W;D&.? MHF!0MI54#*!I4J:$P<<P+3RC"_6;&N:7T,8IJ#U36Y"?^UCY9/3>L-/5*(%D MQ`O&$R\]D<3I]<!&,!_-[-><?#SX/&0=J?5*J%VZ7LVO15C:@T:'_OKBV<N3 M*_3&@>2!9T!-"&&'A\PK8&!0MT`#*3QDY#9,@-*R2,$@`U(,+M(@`72G$$(" MSI$%SB-M.T<+&DW="@ZZK"II,+?EH.[;'D-.Q4H(0T66C0%%E#D8<&.=O6OX M9BNIBK$KY4Q&*&8RCH7W^;TINQ3'"18KWMYA@^@:H9_(6)02^@DTQRQ?LR?' M1^RG'L3H5A/?,?PE.Q<ILO$@NO;,,TR8+"_?"@B(=:#+CD"TPU[\\KS7&Y'U M]XD.XE(H)[DIV+!S!J:SM2R73(L$\@ZQQP:"\SY7<B&S(&&17`@LXV0!I'*9 M5I9/WO[*8YE%V'%EQ(%!>TC+Y]<G$"BZ_.@-'.+1T9M*@4_)I+@>`E\7L(S> MF##BB(6XHA?FXODMZH+?VF7D).TX+RE1YI\T<DB_8SBM7/9V^]0Z4!GA+LO) M8<B/$D>HHSEM`'?^-CBH;L#(*M:&PK%:*Z0AIZVD)JLE;?`:9FO?P:P2<J@G M^YLURO-,X*3TK#::HLW%P?>="4[KF3/ZWY4:;_;K-'+8D-:01\&AL9I.`_^8 M8JR8=HO/903GV>7EY2D;P$U4ZSF;"YCIF`8H/8`N/%!+09!M%Z2UW<T\<X<[ M[-?\7CT+L2$.5F5^KN0W2.HG<=MLC;X;@O\TS&R+PF"B.-II1MA&^[FS;1Y3 M:XV<G`_'L]G(F$ATN\V90;*/RYY8/FJE>[C<0F8WE6HU\<SD\8TD;@'^Q@`U M.SF-/=(#:;,,&Q&^-\`5>QPFN18P("F`P\F'^Q8"%T-*:V,12+>BN&?J:^A. MX=+#X?YQ>,&GP\%L,J;'0H@;G@2Z=/.>I@V-K0"0ACB=PGR'Z3F87O#1V7AX M:O;OK26ADNB=(C@'2<+LZX]9-`"CB$0[*I`[$G&P2DIBG^6I*)>T[>1N,T'V MG5G3D*?M%L=)&LC,HQ<LM0B[&R\X0/GV]<HMJVZ-E#8#$]BP$`]!A'TWX55O MU<XC=#3)X47&[.;V=4-76Q'ND9X$D#SK,\E>D05]]N2)=$%L;:[29(^\:NSG *?P-90<E5X0X````` ` end ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org