Changeset 3 in lab

Timestamp:

Jun 4, 2009 5:02:46 PM (15 years ago)

Author:

mitty

Message:

• change expiration date of ssl certification
• enable to create server certification
• set certification type

Location:

trunk/openssl

Files:

• . (copied) (copied from vendor/ubuntu/openssl)
• CA.sh (modified) (1 diff)
• openssl.cnf (modified) (3 diffs)

trunk/openssl/CA.sh

@@ -33 +33 @@
 if [ -z "$OPENSSL" ]; then OPENSSL=openssl; fi
 
-DAYS="-days 365"    # 1 year
-CADAYS="-days 1095" # 3 years
+DAYS="-days 3650"   # 10 years
+CADAYS="-days 3650" # 10 years
 REQ="$OPENSSL req $SSLEAY_CONFIG"
 CA="$OPENSSL ca $SSLEAY_CONFIG"

trunk/openssl/openssl.cnf

@@ -66 +66 @@
 # crl_extensions    = crl_ext
 
-default_days    = 365           # how long to certify for
+default_days    = 3650          # how long to certify for
 default_crl_days= 30            # how long before next CRL
 default_md  = sha1          # which md to use.
@@ -170 +170 @@
 
 # This is OK for an SSL server.
-# nsCertType            = server
+nsCertType          = server
 
 # For an object signing certificate this would be used.
@@ -239 +239 @@
 
 # Some might want this also
-# nsCertType = sslCA, emailCA
+nsCertType = sslCA, emailCA
 
 # Include email address in subject alt name: another PKIX recommendation