Hi,

The process of renewing a self-signed certificate once it has expired is as follows:

1)Revoke the existing (expired) certificate

2)Sign the (existing) CSR to create a new certificate

To do this create renew-server-cert.sh and renew-user-cert.sh as follows

$cp sign-server-cert.sh renew-server-cert.sh

$cp sign-user-cert.sh renew-user-cert.sh

$patch renew-server-cert.sh < server-patch

$patch renew-server-cert.sh < user-patch

And get the patchfile for renew-server-cert.sh in the following link

                    http://mark.foster.cc/kb/tips.html

                        Hope it is useful for you

 

Regards,

Kathiravan

www.visolve.com

 

----- Original Message -----

From: "Gerd Schering" <[EMAIL PROTECTED]>
Sent: Thursday, January 22, 2004 3:34 PM
Subject: revoking expired certificates

> Hi,
>
> It is possible (via the ca utility) to revoke certificates that already
> have expired.
> What for is this usefull?
> Does this mean that evreything that has been signed or encrypted with
> the public key belonging to the revoked certificate has to be considered
> as obsolete?
>
> Gerd
> --
> ------------------------------------------------------
> -- Gerd Schering, Email: [EMAIL PROTECTED]  --
> ------------------------------------------------------
>

 


Do you Yahoo!?
Yahoo! SiteBuilder - Free web site building tool. Try it!

Reply via email to