Re: [Ejbca-develop] EJBCA - notBefore Date

[Tomas G. <to...@pr...>]

Hi,

The end entity profile in itself only specifies the possible values you 
can enter for a user.
If you look in the Admin GUI you will find a _field_ where you can enter 
notBefore date. This means that your adduser operation must _set_ the 
notBefore value, otherwise it will be unset, and the current date will 
be used.

See Validity in http://www.ejbca.org/userguide.html#Certificate%20profiles.

I don't think you can set that value using the adduser CLI command?
I think you can set it using the WebService CLI though (edituser).


Cheers,
Tomas
**********
PrimeKey Solutions AB
Anderstorpsvägen 16, 171 54 Solna, Sweden
Mob: +46 (0)707421096
Internet: www.primekey.se
Twitter: twitter.com/primekeyPKI
**********

On 05/21/2013 03:58 PM, Daniel JAMET wrote:
> Hi All,
>
> I'm wanting to create an end entity on EJBCA with command line.
>
> 1) I have created  two xml files: a certificate profile and an end
> entity profile (see the attachment).
>
> 2) I have imported them with the command <ejbca.sh ca importprofiles rep>.
>
> 3) I have generated a p12 file with commands <bin/ejbca.sh ra adduser >
> , <bin/ejbca.sh ra setclearpwd>
>
>      and <bin/ejbca.sh batch>
>
> 4) All seemed Ok but the p12 notBefore date  isn't the end entity
> profile notBefore date.
>
> notBefore is always the current date.
>
> Have you any idea ?
>
> Best regards
>
>
> Daniel JAMET
>
>
>
> ------------------------------------------------------------------------------
> Try New Relic Now & We'll Send You this Cool Shirt
> New Relic is the only SaaS-based application performance monitoring service
> that delivers powerful full stack analytics. Optimize and monitor your
> browser, app, & servers with just a few lines of code. Try New Relic
> and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
>
>
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>