Re: make certificate with make is only 1 month valid

sphaero wrote:

I was just wondering why the Makefile in freeradius 2.0 for creating certificates only produces a CA which is valid for 1 month. I don't reckon that's handy for production use.

They are "test" certificates. For production use you need to edit the OpenSSL configuration files.

Is there any particular reason? Changing the ca.cnf file doesn't change it?

Maybe it's a bug in OpenSSL.

Adding "-days 3650" to the Makefile helps though but that's no fix just a workaround IMHO.

If it's the only way to do it, it's a fix. Alan DeKok.