Re: Is it necessary to generate a new SSL request each year?

2009-04-30 Thread John Almberg


 You can reuse the old one.


I'm not an expert on these, but it was my understanding that
certificates carry in internal expiration date after which the
application may respond as it pleases.


Yes, but the *request* does not.
Also, if using openssl, just set the defaults in /etc/ssl/ 
openssl.cnf to your

values, so you can enter through the questions


Cool... save a minute here and a minute there... at the end of a  
year, I might have enough saved up to take lunch!


-- John


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Is it necessary to generate a new SSL request each year?

2009-04-29 Thread Dan Nelson
In the last episode (Apr 29), John Almberg said:
 When buying a new SSL cert, I've been generating a new request each
 year...  I am just about to buy another and it occurred to me that I'm
 entering the same info.  Do I really need a new request file each year? 
 Or can I just reuse the same one (presuming none of the info has changed.)

You can reuse the old one.

-- 
Dan Nelson
dnel...@allantgroup.com
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Is it necessary to generate a new SSL request each year?

2009-04-29 Thread Robert Huff

Dan Nelson writes:

   When buying a new SSL cert, I've been generating a new 
   request each year...  I am just about to buy another and it
   occurred to me that I'm entering the same info.  Do I really
   need a new request file each year?  Or can I just reuse the
   same one (presuming none of the info has changed.) 
  
  You can reuse the old one.

I'm not an expert on these, but it was my understanding that
certificates carry in internal expiration date after which the
application may respond as it pleases.


Robert Huff


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org


Re: Is it necessary to generate a new SSL request each year?

2009-04-29 Thread Mel Flynn
On Thursday 30 April 2009 01:05:50 Robert Huff wrote:
 Dan Nelson writes:
When buying a new SSL cert, I've been generating a new
request each year...  I am just about to buy another and it
occurred to me that I'm entering the same info.  Do I really
need a new request file each year?  Or can I just reuse the
same one (presuming none of the info has changed.)
 
   You can reuse the old one.

   I'm not an expert on these, but it was my understanding that
 certificates carry in internal expiration date after which the
 application may respond as it pleases.

Yes, but the *request* does not.
Also, if using openssl, just set the defaults in /etc/ssl/openssl.cnf to your 
values, so you can enter through the questions.
-- 
Mel
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to freebsd-questions-unsubscr...@freebsd.org