>The ability to represent different certs
>with the same hash value is vital if you adopt a strategy of 2 years
>CA cert validity, 1 year active usage and overlapping validity.


An other solution is to have slightly different CN values by including the
year of validity in the name for example.

Nicolas Roumiantzeff.

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to