Re: Correct way to expire certificate

[Gertraud Unterreitmeier]

Hello,

both "E" and "R" could be used.
"E" means expired
"R" means revoked

Both values in the index.txt file have the effect
that you can recreate or prolong this
certificate.

Regards,

Gertraud

"Roach, Mark R." wrote:
> 
> On Tue, 2002-01-22 at 18:28, Michael Richardson wrote:
> >
> >   I had to change the "V" to an "R" and enter a date when the certificate
> > was to have expired. This goes in a field that is normally blank, e.g:
> 
> Hmm, so I could just parse all the certificates via cron, and make it
> insert the appropriate timestamp...
> 
> Are you sure that an 'R' is the right character? I saw in my searches
> some pages that indicated an 'E' was appropriate.
> 
> Thanks,
> 
> Mark Roach
> 
> __
> OpenSSL Project http://www.openssl.org
> User Support Mailing List[EMAIL PROTECTED]
> Automated List Manager   [EMAIL PROTECTED]

-- 
Gertraud Unterreitmeier
Development

Activis
Gutenbergstr. 1
D-85737 Ismaning
Tel: +49-89-94573-453
Fax: +49-89-94573-479

  

__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]

Re: Correct way to expire certificate

[Michael Richardson]

> "Roach," == Roach, Mark R <[EMAIL PROTECTED]> writes:
Roach,> On Tue, 2002-01-22 at 18:28, Michael Richardson wrote:
>> 
>> I had to change the "V" to an "R" and enter a date when the certificate
>> was to have expired. This goes in a field that is normally blank, e.g:

Roach,> Hmm, so I could just parse all the certificates via cron, and make it
Roach,> insert the appropriate timestamp...

Roach,> Are you sure that an 'R' is the right character? I saw in my searches
Roach,> some pages that indicated an 'E' was appropriate.

  You could be right.

  I did this on advice from Rodney Thayer when my email relaying-permitted
certificate expired while at IETF.

]   ON HUMILITY: to err is human. To moo, bovine.   |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON|net architect[
] [EMAIL PROTECTED] http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [


__
OpenSSL Project http://www.openssl.org
User Support Mailing List[EMAIL PROTECTED]
Automated List Manager   [EMAIL PROTECTED]