-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hello Gert,
my ca_cert.pem is valid till 2023. ;-) I created a new certificate for the server with openssl genrsa -out serverkey_3650.pem -aes128 2048 -days 3650 -config ./openssl.conf openssl req -new -key serverkey_3650.pem -out req_3650.pem -nodes - -config ./openssl.conf openssl ca -keyfile ssl_priv.pem -cert ca_cert.pem -in req_3650.pem - -notext -out servercert_3650.pem -config ./openssl.conf -days 3650 openssl verify -CAfile ca_cert.pem -verbose clients/client-cert-MichaelPost.pem says that my client certificate is also expired. Any clue? Thanks a lot, Michael Am 09.03.14 15:11, schrieb Gert Doering: > Hi, > > On Sun, Mar 09, 2014 at 02:39:03PM +0100, Michael Post wrote: >> Is there any possibility to extend the certificates, keys and so >> on server-side WITHOUT any change at client-side? > > If the *CA* cert is still valid, just generate a new certificate > for the server, and you're done. Client will see "cert valid, > signed by my CA, good" and don't even notice that it's a new cert. > > If the *CA* cert is also expired, you'll have to replace that one > on every single client. > > gert < -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCgAGBQJTHHrKAAoJEFF6fE6T32A8hEwH/1OumRn8vSDW+1OOhaViHfhu wbCt8HJpVcN/zIGBqdVPQqnAs+Q2vcjzM7Y8ABRFtE7yxBFmdyjB73PmTTRoP6rv 2N7yNvQ5FkMjK8h6Ts53lWsNnQ32xY20lUPBoCZH0mYdepoZeTZxcE0mkCZ8O7// t2anBSva+P8Q0FgBxilRoVHOlxQDX31P4oq4I/yvGguUtqMohpxMW6qa5qP0iTuE pZJ2+hOdq5qKssqn5kH5gyBxKRGllGNBC05T1e8qddHspooAgUhHbJ57qhJ1ZHf2 /B+CJn8EN64Q6qdsvW81QZRww24c2N/2wR0C/BffHuoUPjTeICaThsMZxypuYTg= =CT7L -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Subversion Kills Productivity. Get off Subversion & Make the Move to Perforce. With Perforce, you get hassle-free workflows. Merge that actually works. Faster operations. Version large binaries. Built-in WAN optimization and the freedom to use Git, Perforce or both. Make the move to Perforce. http://pubads.g.doubleclick.net/gampad/clk?id=122218951&iu=/4140/ostg.clktrk _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
