make certificate with make is only 1 month valid

[Alan DeKok]

sphaero wrote:
> I was just wondering why the Makefile in freeradius 2.0 for creating
> certificates only produces a CA which is valid for 1 month. I don't reckon
> that's handy for production use.

  They are "test" certificates.  For production use you need to edit the
OpenSSL configuration files.

> Is there any particular reason? Changing the ca.cnf file doesn't change it?

  Maybe it's a bug in OpenSSL.

> Adding "-days 3650" to the Makefile helps though but that's no fix just a
> workaround IMHO.

  If it's the only way to do it, it's a fix.

  Alan DeKok.