how to extend the term of CA validity?
Open
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
I generated my self-signed CA by `cfssl gencert -initca`, but the default term of validity is 5 years. How can I modify it to 10 years ? I don’t want to recreate a new CA, because it has signed a lot of sub CAs.
Anyone can help me ? Thanks so much .
Contributor guide
Research direction
Start by reviewing how `cfssl gencert -initca` selects the default validity period and whether an existing CA can be extended without replacement. Confirm the supported behavior against the certificate and subordinate-CA constraints; done when a documented, verifiable procedure answers whether the existing CA can reach 10 years.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- cryptography, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100