RE: Default_crl_days

2002-05-06 Thread Neff Robert A
Andrew, If you are using the makess.bat file to generate your CA cert, I would look at that and check for a param called -days in the X509 command. This also may show you why your certs are expiring. Hope that helps, Rob -Original Message- From: Andrew T. Finnell [mailto:[EMAIL PROTECTED

RE: Default_crl_days

2002-05-06 Thread Neff Robert A
Sorry, I'm assuming a Windows environment, and the default file would be testss.bat, not makess.bat. Sorry for the confusion. Rob -Original Message- From: Neff Robert A [mailto:[EMAIL PROTECTED]] Sent: Monday, May 06, 2002 3:54 PM To: '[EMAIL PROTECTED]' Subject: RE: D

RE: Default_crl_days

2002-05-06 Thread Andrew T. Finnell
thought it might have to do with that. - Andrew T. Finnell Active Solutions L.L.C [EMAIL PROTECTED] > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Neff Robert A > Sent: Monday, May 06, 2002 3:54 PM > To: '[EMAIL PROTE

RE: Default_crl_days

2002-05-06 Thread Chris Cleeland
On Mon, 6 May 2002, Andrew T. Finnell wrote: > Nope we have our own script that just uses the openssl tool. > Basically we do .\openssl req -config openssl.cfg -newkey > dsa:dsaparam.pem -x509 -nodes -out cacert.pem -keyout cakey.pem In our > openssl.cfg file the only thing near 30 days is

RE: Default_crl_days

2002-05-06 Thread Andrew T. Finnell
- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of Chris Cleeland > Sent: Monday, May 06, 2002 5:20 PM > To: [EMAIL PROTECTED] > Subject: RE: Default_crl_days > > > On Mon, 6 May 2002, Andrew T. Finnell wrote: > > > Nope we have our o