Andrew W. Gray wrote:
> 
> >So how shall I do a renewal?
> x509 -x509toreq ........
> 
> e.g.
> 
> x509 -in your_current_cert.pem  -signkey your_certs_priv_key.pem -x509toreq -out 
>new_req.pem
> 

This will generate a request with the same information in the original
certificate. Good. But when I tried to sign it, I got error saying it
exists already:

ERROR:There is already a certificate for /C=US/ST=MA/O=IntelliSoft
Corporation/OU=Engineer/CN=Dr. Weidong [EMAIL PROTECTED]
The matching entry has the following details
Type          :Valid
Expires on    :990313025049Z
Serial Number :1D
File name     :unknown
Subject Name  :/C=US/ST=MA/O=IntelliSoft Corporation/OU=Engineer/CN=Dr.
Weidong [EMAIL PROTECTED]

I did not get a new or renewed certificate. Does it mean that I have to
wait until a certificate has actually expired to be able to renew it?

Suppose that is the case (wait until expired to renew), what will be my
new cert? Will it be a totally new cert with new serial number, or just
a renewed one with the same serial number?

Thanks.


Weidong
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/  |
+-------------------------------------------------------------------------+

Reply via email to