On Wed, Oct 13, 2010, Vinay Kumar L wrote: > Hi all, > > I am trying to generate certificate which is valid for 20years. As the > 20years crosses unix end time(January 19, 2038 03:14:07 GMT) from the > current date, openssl certificate generated will have wrong dates(Not > before and not after times) in certificate as follows: > > *Validity > Not Before: Oct 13 06:43:05 2010 GMT > Not After : Jan 23 00:14:49 1902 GMT* > > Is there any way to generate certificate which is valid for 20yrs from > current date so that it will have correct validity times even if 20years > crosses unix end time? Please guide me. >
OpenSSL 0.9.8 and earlier relies on the OS supplied date routines. OpenSSL 1.0.0 and later uses its own routines: I'd suggest you try that. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org
