Re: [Openvpn-users] Using easyrsa3 - how to set longer expiration than 10 years?

2023-10-06 Thread Bo Berglund
On Fri, 06 Oct 2023 20:59:48 +, tincantech via Openvpn-users wrote: >On Friday, October 6th, 2023 at 21:17, Bo Berglund >wrote: > > >> In easyrsa2 one could enter a longer expiration than 3650 days by editing the >> vars file and changing these entries >> >> export CA_EXPIRE=3650 >> export

Re: [Openvpn-users] Using easyrsa3 - how to set longer expiration than 10 years?

2023-10-06 Thread Jochen Bern
On 06.10.23 22:17, Bo Berglund wrote: In easyrsa2 one could enter a longer expiration [...] like 7300 (20 years). [...] will my suggested expirations above not work? Define "work". If you create a CA cert with a lifetime of 20 years and leaf certs with a lifetime of 100 days less today, and k

Re: [Openvpn-users] Using easyrsa3 - how to set longer expiration than 10 years?

2023-10-06 Thread tincantech via Openvpn-users
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Sent with Proton Mail secure email. --- Original Message --- On Friday, October 6th, 2023 at 21:17, Bo Berglund wrote: > In easyrsa2 one could enter a longer expiration than 3650 days by editing the > vars file and changing these en

[Openvpn-users] Using easyrsa3 - how to set longer expiration than 10 years?

2023-10-06 Thread Bo Berglund
In easyrsa2 one could enter a longer expiration than 3650 days by editing the vars file and changing these entries export CA_EXPIRE=3650 export KEY_EXPIRE=3650 to a different value like 7300 (20 years). How is it done correctly using easyrsa3? Like this? - rename vars.example to vars - Activat