RE: SCG, DSA

[Dilkie, Lee]

3.> When I use the .cnf file, putting in my own data... it doesn't seem to work.  Of note is the DATE -- even if I stick in, say, 3650 days, the cert still defaults to a years expiry.  Why don't my changes to the cnf file work -- is there some sort of trick or something I'm missing?? [Lee]  I used the -days option on the cmd line. ie:   openssl req -x509 -new -key ca.key -config openssl.cnf -days 10000 >ca.crt   It fails if the days value is too large (like 100 years!).