Certificate validation time

[Alan DeKok]

_Stefan_H wrote:
> I'm using freeradius 2.1.1 and i created my certificates with the makefile
> and the config-files.
> Is it possible to rise the time the cerficate is valid, because if i change
> the entrys "default_days" and "default_crl_days" in the ca.cnf to an higher
> value, nothing happens after I recreat the certificates, everytime the
> certificate is only 30 days valid.

  It's a bug on OpenSSL.  It ignores those fields in the ca.cnf file.

  Later versions of FreeRADIUS have a fix.  See the Makefile in 2.1.9.

  Alan DeKok.