Andrew W. Gray wrote:
>
> >So how shall I do a renewal?
> x509 -x509toreq ........
>
> e.g.
>
> x509 -in your_current_cert.pem -signkey your_certs_priv_key.pem -x509toreq -out
>new_req.pem
>
This will generate a request with the same information in the original
certificate. Good. But when I tried to sign it, I got error saying it
exists already:
ERROR:There is already a certificate for /C=US/ST=MA/O=IntelliSoft
Corporation/OU=Engineer/CN=Dr. Weidong [EMAIL PROTECTED]
The matching entry has the following details
Type :Valid
Expires on :990313025049Z
Serial Number :1D
File name :unknown
Subject Name :/C=US/ST=MA/O=IntelliSoft Corporation/OU=Engineer/CN=Dr.
Weidong [EMAIL PROTECTED]
I did not get a new or renewed certificate. Does it mean that I have to
wait until a certificate has actually expired to be able to renew it?
Suppose that is the case (wait until expired to renew), what will be my
new cert? Will it be a totally new cert with new serial number, or just
a renewed one with the same serial number?
Thanks.
Weidong
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/ |
+-------------------------------------------------------------------------+