Certificate validation time

Alan DeKok aland at deployingradius.com
Fri Jul 23 20:22:07 CEST 2010


_Stefan_H wrote:
> I'm using freeradius 2.1.1 and i created my certificates with the makefile
> and the config-files.
> Is it possible to rise the time the cerficate is valid, because if i change
> the entrys "default_days" and "default_crl_days" in the ca.cnf to an higher
> value, nothing happens after I recreat the certificates, everytime the
> certificate is only 30 days valid.

  It's a bug on OpenSSL.  It ignores those fields in the ca.cnf file.

  Later versions of FreeRADIUS have a fix.  See the Makefile in 2.1.9.

  Alan DeKok.



More information about the Freeradius-Users mailing list