Re: Creating a CA cert with explicit start/end date

2009-02-22 Thread Oliver Martin
Am Sun, 22 Feb 2009 13:12:21 +0100 schrieb Dr. Stephen Henson: > OpenSSL will only use GenerlizedTime in accordance with the > standards: i.e. for years after 2049. However if you set -days to a Nitpick: RFC 5280 doesn't explicitly mention years before 1950, but OpenSSL already handles these in t

Re: Creating a CA cert with explicit start/end date

2009-02-21 Thread Oliver Martin
Am Sat, 21 Feb 2009 00:07:28 +0100 schrieb Oliver Martin: > I'm trying to create a CA cert with explicit notBefore and notAfter > dates. I've tried to follow the advice given in an old mailing list > post [1], but haven't been successful so far. I've found a sol

Creating a CA cert with explicit start/end date

2009-02-20 Thread Oliver Martin
Hello, I'm trying to create a CA cert with explicit notBefore and notAfter dates. I've tried to follow the advice given in an old mailing list post [1], but haven't been successful so far. The commands I'm using are these: openssl req -nodes -config ca/openssl.cnf -days 1825 -x509 -newkey \ rsa: