LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 05-07-2008, 09:59 PM   #1
fukawi2
Member
 
Registered: Oct 2006
Location: Melbourne, Australia
Distribution: ArchLinux, ArchServer, Fedora, CentOS
Posts: 448

Rep: Reputation: 34
OpenVPN CA Certificate Invalid


Hi all,

Does anyone know if a CA Certificate is GENERATED at a future date, is the certificate invalid until that date?

Ie, if I set my system date to 25th December 2010, then set my date correctly using ntp, is that certificate invalid until Christmas day 2010 or can I use it before then?

Thanks,
~p
 
Old 05-07-2008, 10:12 PM   #2
uncle_philip
Member
 
Registered: Apr 2008
Location: sydney
Distribution: centos5.2
Posts: 50

Rep: Reputation: 15
you don't need to change your computer date.
when create CA, you can set it for 10 years.
 
Old 05-07-2008, 10:41 PM   #3
billymayday
Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
He's refering to a start date rather than an expiry.

I don't know the answer though
 
Old 05-07-2008, 10:57 PM   #4
fukawi2
Member
 
Registered: Oct 2006
Location: Melbourne, Australia
Distribution: ArchLinux, ArchServer, Fedora, CentOS
Posts: 448

Original Poster
Rep: Reputation: 34
Quote:
Originally Posted by billymayday View Post
He's refering to a start date rather than an expiry.
Correct.

Quote:
Originally Posted by billymayday View Post
I don't know the answer though
Bugger!

I'm getting "Certificate Not Yet Valid" errors even though both client and server have been sync'ed to a common NTP server (ntp.internode.on.net) but the certificate was generated on the server before the ntp sync occurred and the date was incorrectly around 10 hours ahead (approx 2000hrs tonight, instead of 0930hrs today)
 
Old 05-07-2008, 11:01 PM   #5
billymayday
Guru
 
Registered: Mar 2006
Location: Sydney, Australia
Distribution: Fedora, CentOS, OpenSuse, Slack, Gentoo, Debian, Arch, PCBSD
Posts: 6,678

Rep: Reputation: 122Reputation: 122
Sounds pretty likely as the cause
 
  


Reply

Tags
certificate, openvpn


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
OpenVPN client has not default gateway when connect to OpenVPN server sailershen Linux - Security 3 03-04-2010 02:20 AM
openvpn client certificate is 0 bytes Sleen Linux - Networking 6 10-24-2006 05:03 AM
Can I retrieve certificate expiry date from an openssl certificate (command line) davee Linux - Security 1 07-21-2006 10:28 AM
Webmin error local machine: Recieved invalid certificate sallas Linux - Software 2 06-19-2004 08:59 PM
webmin + invalid certificate rosscopeeko Mandriva 0 03-08-2004 10:22 AM


All times are GMT -5. The time now is 08:15 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration