Re: I have a question about Easy-RSA

Hi,

On Mon, Jan 08, 2024 at 03:09:24PM +0100, Bo Berglund wrote:
> There are several different types of files involved here (*.crt, *.csr, *.key,
> *.pem) and I don't know how each is actually used...

.csr, .key have no lifetimes
.crt is the certificate, which has

  $ openssl x509 -in mycert.crt -text noout
...
        Validity
            Not Before: Oct 31 19:39:54 2019 GMT
            Not After : Oct 28 19:39:54 2029 GMT

.pem is just a file format, so you can have a key, csr or cert in "pem"
format.

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

-----BEGIN PGP SIGNATURE-----
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=3BOl
-----END PGP SIGNATURE-----