On Tue September 30 2008, Alessandro Tani wrote: > Hello, > > my name is Alessandro Tani, together with my colleague Iarno Pagliani, > we made a guide > (http://www.homeworks.it/Html/OpenSSL_PKI_Articolo_Eng.html) on how to > create a PKI infrastructure with OpenSSL on Debian platform, to provide > digital certificates for programs like Postfix, Courier, Apache and > people to be able to digitally sign and encrypt their emails. We'd love > to know your opinion about the article we have achieved. We apologize > right now for our English, if you find errors or inaccuracies, both in > the article and in the language, we would be very grateful if you could > have the report. We will immediately fix the inaccuracies. > > You can find our article on URL: > http://www.homeworks.it/Html/OpenSSL_PKI_Articolo_Eng.html >
I did notice one thing - You have a 16 year certificate - Later you suggest using a USB stick to hold it - USB sticks only have a reliable data retention period of ten years. Add to your administrative routine the task of reading that USB stick every 5 years and re-writing it to a new stick. Mike > Thank you very much, > > Alessandro Tani > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]