On 25/02/2023 16:36, Bo Berglund wrote:
On Thu, 23 Feb 2023 18:34:11 +0100, David Sommerseth
wrote:
Yes, you can issue new certificates using *the same* private and public
keys (essentially re-using the CSR). This will issue a new certificate
with a new expiry date. Since the certificate and
On Sat, 25 Feb 2023 22:04:42 +, tincantech via Openvpn-users
wrote:
>-BEGIN PGP SIGNED MESSAGE-
>Hash: SHA256
>
>Hi,
>> UPDATE (almost there):
>> --
>> I found this forum post most useful:
>> https://forums.openvpn.net/viewtopic.php?t=18671#p51517
>>
>> So now I h
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Hi,
--- Original Message ---
On Saturday, February 25th, 2023 at 21:12, Bo Berglund
wrote:
> On Thu, 23 Feb 2023 17:43:15 +0100, Bo Berglund bo.bergl...@gmail.com wrote:
>
> > Questions:
> >
> > Can I extend the expiration time of my
On Thu, 23 Feb 2023 17:43:15 +0100, Bo Berglund wrote:
>Questions:
>
>Can I extend the expiration time of my server and the cleints too before actual
>expiration such that this will not happen on Oct 24, 2027?
>
UPDATE (almost there):
--
I found this forum post most useful:
h
On Thu, 23 Feb 2023 18:34:11 +0100, David Sommerseth
wrote:
>You can also explicitly disable clients this way with client-config-dir
>by adding the option "disable" inside such a CCD config file.
>
Thanks a lot!!
This sounds like a more convenient way of handling the lockout of certain
clients
On Thu, 23 Feb 2023 18:34:11 +0100, David Sommerseth
wrote:
>Yes, you can issue new certificates using *the same* private and public
>keys (essentially re-using the CSR). This will issue a new certificate
>with a new expiry date. Since the certificate and CA is the same, it
>just works as be
On Sat, Feb 25, 2023 at 15:46 David Sommerseth
wrote:
>
>
> On 24/02/2023 00:20, Bo Berglund wrote:
> [...snip...]
>
> I'll let others follow up on the easy-rsa usage.
>
> >> This renewed certificate uses the original entity private key.
> >
> > This expiration business, does it apply only to crt
On 24/02/2023 00:20, Bo Berglund wrote:
[...snip...]
I'll let others follow up on the easy-rsa usage.
This renewed certificate uses the original entity private key.
This expiration business, does it apply only to crt files?
With all other files remaining the same over time?
Yes. The cer
