In easyrsa2 one could enter a longer expiration than 3650 days by editing the
vars file and changing these entries

export CA_EXPIRE=3650
export KEY_EXPIRE=3650

to a different value like 7300 (20 years).

How is it done correctly using easyrsa3?

Like this?

- rename vars.example to vars
- Activate lines and values:
  set_var EASYRSA_CA_EXPIRE       7300
  set_var EASYRSA_CERT_EXPIRE     7200

I have noted that these two have defaults of 3650 and 825 days respectively,
what is the reason for that and will my suggested expirations above not work?


-- 
Bo Berglund
Developer in Sweden



_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to