[Freeipa-users] Signing certs with longer lifetimes (FreeIPA CA)

[Bret Wortman]

It seems all our certs being signed by the FreeIPA CA are given 2 year 
expirations. We'd like to increase that to 5 years. I've added "-v 60" 
to our certutil commands generating the CSRs, but the CA is still only 
issuing 24 month certs.

What do I need to change to issue certs with longer lifetimes? We really 
don't want to go around every 2 years and reissue certs...


-- 
*Bret Wortman*
Damascus Products
ph/fax: 1-855-644-2783
Wrap Buddies InDemand <wrapbuddies.co/store> at http://bwortman.us/2ieQN4t
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170119/89957a32/attachment.htm>