Am Sun, 22 Feb 2009 13:12:21 +0100 schrieb Dr. Stephen Henson:
> OpenSSL will only use GenerlizedTime in accordance with the
> standards: i.e. for years after 2049. However if you set -days to a
Nitpick: RFC 5280 doesn't explicitly mention years before 1950, but
OpenSSL already handles these in t
On Sun, Feb 22, 2009, Oliver Martin wrote:
> Am Sat, 21 Feb 2009 00:07:28 +0100 schrieb Oliver Martin:
>
> > On a somewhat related note, is it possible to use GeneralizedTime
> > instead of UTCTime for notBefore and notAfter with OpenSSL, as
> > explained here [3]? My ultimate goal is a certifica
Am Sat, 21 Feb 2009 00:07:28 +0100 schrieb Oliver Martin:
> I'm trying to create a CA cert with explicit notBefore and notAfter
> dates. I've tried to follow the advice given in an old mailing list
> post [1], but haven't been successful so far.
I've found a solution for that part:
openssl genrs
Hello,
I'm trying to create a CA cert with explicit notBefore and notAfter
dates. I've tried to follow the advice given in an old mailing list
post [1], but haven't been successful so far.
The commands I'm using are these:
openssl req -nodes -config ca/openssl.cnf -days 1825 -x509 -newkey \
rsa: