<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>It seems all our certs being signed by the FreeIPA CA are given 2
year expirations. We'd like to increase that to 5 years. I've
added "-v 60" to our certutil commands generating the CSRs, but
the CA is still only issuing 24 month certs.</p>
<p>What do I need to change to issue certs with longer lifetimes? We
really don't want to go around every 2 years and reissue certs...<br>
</p>
<br>
<div class="moz-signature">-- <br>
<div><b>Bret Wortman</b></div>
<div>Damascus Products</div>
<div>ph/fax: 1-855-644-2783</div>
<div><a href="wrapbuddies.co/store">Wrap Buddies InDemand</a> at
<a class="moz-txt-link-freetext" href="http://bwortman.us/2ieQN4t">http://bwortman.us/2ieQN4t</a><br>
</div>
</div>
</body>
</html>