Re: setting certificate expiry to more than 30 days

2005-03-02 Thread Bernhard Froehlich
Sanjay Acharya wrote:
Hello. I am posting this message again. Can someone
help me over this. I am trying to create certificate
using req command as follows,
 

See http://www.openssl.org/docs/apps/req.html
Use -days option.
Ted
;)
--
PGP Public Key Information
Download complete Key from http://www.convey.de/ted/tedkey_convey.asc
Key fingerprint = 31B0 E029 BCF9 6605 DAC1  B2E1 0CC8 70F4 7AFB 8D26


smime.p7s
Description: S/MIME Cryptographic Signature


Re: setting certificate expiry to more than 30 days

2005-03-02 Thread Sanjay Acharya
But Ted, if I have to use -days option then why do we
need to specify default_days name-value pairs in the
openssl.cnf? :(

Sanjay Acharya
Wichita State University




--- Bernhard Froehlich [EMAIL PROTECTED] wrote:

 Sanjay Acharya wrote:
 
 Hello. I am posting this message again. Can someone
 help me over this. I am trying to create
 certificate
 using req command as follows,
   
 
 See http://www.openssl.org/docs/apps/req.html
 Use -days option.
 
 Ted
 ;)
 
 -- 
 PGP Public Key Information
 Download complete Key from
 http://www.convey.de/ted/tedkey_convey.asc
 Key fingerprint = 31B0 E029 BCF9 6605 DAC1  B2E1
 0CC8 70F4 7AFB 8D26
 
 

 ATTACHMENT part 2 application/x-pkcs7-signature
name=smime.p7s



__
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com 
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]


Re: setting certificate expiry to more than 30 days

2005-03-02 Thread Bernhard Froehlich
Sanjay Acharya wrote:
But Ted, if I have to use -days option then why do we
need to specify default_days name-value pairs in the
openssl.cnf? :(
Sanjay Acharya
Wichita State University
 

Hmm, default_days is in the CA-section of the config. So I think it 
applies to the CA-command only. It would be worth a try to enter a 
default_days in the req section, but since it's not documented I'd doubt 
that it will work.

Hope it helps,
Ted
;)


smime.p7s
Description: S/MIME Cryptographic Signature