Hi, On Sun, Mar 09, 2014 at 02:39:03PM +0100, Michael Post wrote: > Is there any possibility to extend the certificates, keys and so on > server-side WITHOUT any change at client-side?
If the *CA* cert is still valid, just generate a new certificate for
the server, and you're done. Client will see "cert valid, signed by
my CA, good" and don't even notice that it's a new cert.
If the *CA* cert is also expired, you'll have to replace that one on
every single client.
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgpda5xoZjKeu.pgp
Description: PGP signature
------------------------------------------------------------------------------ Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce. With Perforce, you get hassle-free workflows. Merge that actually works. Faster operations. Version large binaries. Built-in WAN optimization and the freedom to use Git, Perforce or both. Make the move to Perforce. http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk
_______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
