Changeset 3 in lab


Ignore:
Timestamp:
Jun 4, 2009 5:02:46 PM (15 years ago)
Author:
mitty
Message:
  • change expiration date of ssl certification
  • enable to create server certification
  • set certification type
Location:
trunk/openssl
Files:
2 edited
1 copied

Legend:

Unmodified
Added
Removed
  • trunk/openssl/CA.sh

    r2 r3  
    3333if [ -z "$OPENSSL" ]; then OPENSSL=openssl; fi 
    3434 
    35 DAYS="-days 365"    # 1 year 
    36 CADAYS="-days 1095" # 3 years 
     35DAYS="-days 3650"   # 10 years 
     36CADAYS="-days 3650" # 10 years 
    3737REQ="$OPENSSL req $SSLEAY_CONFIG" 
    3838CA="$OPENSSL ca $SSLEAY_CONFIG" 
  • trunk/openssl/openssl.cnf

    r2 r3  
    6666# crl_extensions    = crl_ext 
    6767 
    68 default_days    = 365           # how long to certify for 
     68default_days    = 3650          # how long to certify for 
    6969default_crl_days= 30            # how long before next CRL 
    7070default_md  = sha1          # which md to use. 
     
    170170 
    171171# This is OK for an SSL server. 
    172 # nsCertType            = server 
     172nsCertType          = server 
    173173 
    174174# For an object signing certificate this would be used. 
     
    239239 
    240240# Some might want this also 
    241 # nsCertType = sslCA, emailCA 
     241nsCertType = sslCA, emailCA 
    242242 
    243243# Include email address in subject alt name: another PKIX recommendation 
Note: See TracChangeset for help on using the changeset viewer.