modify expiration days in a self signed server cert?

[patti]

Hi,

I am trying to find out if its possible to edit/modify the expiration days in a self signed Apache server certificate? Ours is expiring but we don't want to regenerate a new one or purchase a new one just yet. Can we modify the current ones -days? If yes, can someone tell me how to do so?

thanks
Patti

 

[jmstacey]

You can modify the default number of days using /etc/openssl.cnf http://www.technoids.org/openssl.cnf.html

You can also override it in the command used when generating the cert.

 

[patti]

Thanks Stacey... if I am reading your response correctly, you are saying that an existing Server Cert can be modified without having to regenerate a new one. Is that correct?

Patti

 

[nobaloney]

I don't know of any way you can modify an existing cert.

What you can do is modify the ssl configuration to allow it to create a cert with a longer lifetime.

Jeff

 

[jmstacey]

As Jeff said, modifying the openssl configuration or the other method would require generating a new certificate, which shouldn't be a problem if they are self signed.