[Openswan Users] Host Certifcate

[Paul Wouters]

On Thu, 11 May 2006, Oliver Tomkins wrote:

> The CA had expired and even when I extended the authority the old certificates
> refused to work.  Newly issued certificates work fine, so I now need to
> reissue for all the client machines.

Uhm, all the documentation says "generate the CA to be valid for at least 10 years".

There is a way to renew the CA cert without re-issuing all client certs. Check in
docs/README.X509

Paul