SSL certificate

[Lem0nHead]

when creating a SSL certificate, like described in http://help.directadmin.com/item.php?id=15 , how can I set it to do not expire... or to expire in 3 years?

thanks

 

[rocketcity]

If you are generating a self signed cert, modify the following line:

openssl req -new -x509 -keyout /usr/local/directadmin/conf/cakey.pem.tmp -out /usr/local/directadmin/conf/cacert.pem

to read something like this:

openssl req -new -x509 -days 730 -keyout /usr/local/directadmin/conf/cakey.pem.tmp -out /usr/local/directadmin/conf/cacert.pem

Note that the number of days is the length of time the Cert will be good. So if you want the Cert to be good for 3 Years instead of 2,you would use -days 1095. Also be aware that this temporary certificate will generate an error in the client browser to the effect that the signing certificate authority is unknown and not trusted.

Or you can purchase an SSL Cert for the given number of years you want and intall it.