On Tue September 30 2008, Alessandro Tani wrote:
> Hello,
> 
> my name is Alessandro Tani, together with my colleague Iarno Pagliani, 
> we made a guide 
> (http://www.homeworks.it/Html/OpenSSL_PKI_Articolo_Eng.html) on how to 
> create a PKI infrastructure with OpenSSL on Debian platform, to provide 
> digital certificates for programs like Postfix, Courier, Apache and 
> people to be able to digitally sign and encrypt their emails. We'd love 
> to know your opinion about the article we have achieved. We apologize 
> right now for our English, if you find errors or inaccuracies, both in 
> the article and in the language, we would be very grateful if you could 
> have the report. We will immediately fix the inaccuracies.
> 
> You can find our article on URL: 
> http://www.homeworks.it/Html/OpenSSL_PKI_Articolo_Eng.html
>

I did notice one thing -
You have a 16 year certificate -
Later you suggest using a USB stick to hold it -
USB sticks only have a reliable data retention period of ten years.

Add to your administrative routine the task of reading that USB stick
every 5 years and re-writing it to a new stick.

Mike
> Thank you very much,
> 
> Alessandro Tani
> 


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to