Re: [Openvpn-users] expiry date CA

[Jan J. K. <ja...@ni...>]

Hoi Bonno,

Bonno Bloksma wrote:
> Hi,
>
> I want to find out when my CA expires, how do I do that. I cannot see any readable info by just looking at the ca.key or the ca.crt
> Which command will let me see that info?
> Which command will let me see when the client certs expire?
>
> I want to start getting ready for when my CA needs to be renewed. And for when the keys for my clients need to be renewed. Need to read up on how to generate next CA and make sure current and new clients can still connect. ;-)
>
>   
openssl x509 -subject -dates -noout -in ca.crt

openssl x509 -subject -dates -noout -in client-cert.crt

etc.

HTH,

JJK