RE: Refreshing a self signed root certificate

[John Francis]

A word of warning, this was done to satisfy some test data.   In fact you shouldn’t be doing this at all…you should create a new private key..   The only reason to preserve the old private key is if there is something out there signed with it and if this is the root CA and its public cert has expired you really shouldn’t allow anything out there to remain valid anyway. By issuing a new cert with the old key you are actually allowing old certificates possibly to validate…   From: John Francis [mailto:[EMAIL PROTECTED] Sent: 20 April 2006 15:30 To: 'openssl-users@openssl.org' Subject: RE: Refreshing a self signed root certificate     openssl req -new -x509 -key F:\MyCAs\MyRootCA\private\cakey.pem -keyform PEM -out cacert2.pem -outform PEM   seems to work…