Martin Leung schrieb:
> 
> Hi,
> 
> Does anyone know how to renew certificate?  I tried:
> 
>     openssl x509 -x509toreq -in cert_file -out csr_file -signkey CA_private_key

-signkey private_key_for_your_user_cert

> 
> but the signature of the created csr_file is incorrect.
> 
> Does the 'ca' package have renew function?

no.
 
> In addition, I can't sign certs with same dn but non-overlapped valid period (I use 
>the -startdate option). Also, the ssleay.doc said index.txt has a status 'E' for 
>expiry. How can I activate it? Does it
> matter?

Doesn't matter. 

-- 
Holger Reif                  Tel.: +49 361 74707-0
SmartRing GmbH               Fax.: +49 361 7470720
Europaplatz 5             [EMAIL PROTECTED]
D-99091 Erfurt                    WWW.SmartRing.de
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to