Re: Creating a CA cert with explicit start/end date

2009-02-22 Thread Oliver Martin
Am Sun, 22 Feb 2009 13:12:21 +0100 schrieb Dr. Stephen Henson: > OpenSSL will only use GenerlizedTime in accordance with the > standards: i.e. for years after 2049. However if you set -days to a Nitpick: RFC 5280 doesn't explicitly mention years before 1950, but OpenSSL already handles these in t

Re: Creating a CA cert with explicit start/end date

2009-02-22 Thread Dr. Stephen Henson
On Sun, Feb 22, 2009, Oliver Martin wrote: > Am Sat, 21 Feb 2009 00:07:28 +0100 schrieb Oliver Martin: > > > On a somewhat related note, is it possible to use GeneralizedTime > > instead of UTCTime for notBefore and notAfter with OpenSSL, as > > explained here [3]? My ultimate goal is a certifica

Re: Creating a CA cert with explicit start/end date

2009-02-21 Thread Oliver Martin
Am Sat, 21 Feb 2009 00:07:28 +0100 schrieb Oliver Martin: > I'm trying to create a CA cert with explicit notBefore and notAfter > dates. I've tried to follow the advice given in an old mailing list > post [1], but haven't been successful so far. I've found a solution for that part: openssl genrs

Creating a CA cert with explicit start/end date

2009-02-20 Thread Oliver Martin
Hello, I'm trying to create a CA cert with explicit notBefore and notAfter dates. I've tried to follow the advice given in an old mailing list post [1], but haven't been successful so far. The commands I'm using are these: openssl req -nodes -config ca/openssl.cnf -days 1825 -x509 -newkey \ rsa: