Hoi Bonno, Bonno Bloksma wrote: > Hi, > > I want to find out when my CA expires, how do I do that. I cannot see any > readable info by just looking at the ca.key or the ca.crt > Which command will let me see that info? > Which command will let me see when the client certs expire? > > I want to start getting ready for when my CA needs to be renewed. And for > when the keys for my clients need to be renewed. Need to read up on how to > generate next CA and make sure current and new clients can still connect. ;-) > > openssl x509 -subject -dates -noout -in ca.crt
openssl x509 -subject -dates -noout -in client-cert.crt etc. HTH, JJK ------------------------------------------------------------------------------ WatchGuard Dimension instantly turns raw network data into actionable security intelligence. It gives you real-time visual feedback on key security issues and trends. Skip the complicated setup - simply import a virtual appliance and go from zero to informed in seconds. http://pubads.g.doubleclick.net/gampad/clk?id=123612991&iu=/4140/ostg.clktrk _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users