On Thu, 4 Aug 2011, Dave Thompson wrote:

From: owner-openssl-us...@openssl.org On Behalf Of Alan Buxey
Sent: Thursday, 04 August, 2011 03:54

Thank you! But now I'm spending my time with another issue
with this: I
cannot create certificate longer than I month:
<snip>
The server certificate was created by command:
        openssl req -new -key server.key -out server.csr -days 365

As you can see, the "-days X" did not helped...

check your openssl conf file  - eg /etc/pki/tls/openssl.cnf
on redhat/centos

For 'ca', use openssl.cnf. For 'x509 -req' as OP posted earlier,
use -days ON 'x509 -req' NOT ON 'req -new'.

That was the mistake, thank you! Works!

Tomas
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to