Increase certificates valid dates

rickylim · 04-19-2006, 01:30 AM

Hi all, Good day.

I have created certificates for my webmail with the command:-

#openssl req -new -x509 -days 1825 -key ca.key -out ca.crt

instead of getting valid date for 1825 days, the certs shown valid for only 1 years (365 days) when i logged in and view the certificates from webmail (squirrelmail)

How can i increase the days to 1825?

Please advice

Many Thanks

unSpawn · 04-19-2006, 10:24 AM

How can i increase the days to 1825?
As far as I know you can't. You'll have to generate a new cert.

instead of getting valid date for 1825 days, the certs shown valid for only 1 years (365 days) when i logged in and view the certificates from webmail
I can't reproduce this.
Maybe service not restarted or cert not loaded?
What does "cat ca.crt|openssl x509 -dates|grep -i after" say?

rickylim · 04-19-2006, 08:48 PM

Thanks for ur attention:-

What does "cat ca.crt|openssl x509 -dates|grep -i after" say?

#cat ca.crt|openssl x509 -dates|grep -i after

Result:-
notAfter-Apr 18 03:13:21 2011 GMT

No choice but to regenerate?

unSpawn · 04-20-2006, 05:48 AM

Result:-
notAfter-Apr 18 03:13:21 2011 GMT
No choice but to regenerate?
Looks like $[1825-1] days to me. BTW, please make sure you know what you do when you half-answer to posts.