Re: setting certificate expiry to more than 30 days

[Bernhard Froehlich]

Sanjay Acharya wrote:

But Ted, if I have to use -days option then why do we
need to specify "default_days" name-value pairs in the
openssl.cnf? :(

Sanjay Acharya
Wichita State University

Hmm, default_days is in the CA-section of the config. So I think it applies to the CA-command only. It would be worth a try to enter a default_days in the req section, but since it's not documented I'd doubt that it will work.

Hope it helps,
Ted
;)

smime.p7s
Description: S/MIME Cryptographic Signature