From owner-freebsd-questions@FreeBSD.ORG  Fri May  1 01:44:19 2009
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 460021065672
	for <freebsd-questions@freebsd.org>;
	Fri,  1 May 2009 01:44:19 +0000 (UTC)
	(envelope-from jalmberg@identry.com)
Received: from mx1.identry.com (on.identry.com [66.111.0.194])
	by mx1.freebsd.org (Postfix) with ESMTP id CBBE18FC12
	for <freebsd-questions@freebsd.org>;
	Fri,  1 May 2009 01:44:18 +0000 (UTC)
	(envelope-from jalmberg@identry.com)
Received: (qmail 27885 invoked by uid 89); 1 May 2009 01:44:50 -0000
Received: from unknown (HELO ?192.168.1.110?) (jalmberg@75.127.142.66)
	by mx1.identry.com with ESMTPA; 1 May 2009 01:44:50 -0000
Mime-Version: 1.0 (Apple Message framework v753.1)
In-Reply-To: <200904300742.32991.mel.flynn+fbsd.questions@mailing.thruhere.net>
References: <624F45CA-1083-4DC2-8A98-DFE44B5B6CE8@identry.com>
	<20090429225158.GC91578@dan.emsphone.com>
	<18936.56654.494648.286696@jerusalem.litteratus.org>
	<200904300742.32991.mel.flynn+fbsd.questions@mailing.thruhere.net>
Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed
Message-Id: <D0C3DEE4-D15B-476A-A592-9F5673E4415E@identry.com>
Content-Transfer-Encoding: 7bit
From: John Almberg <jalmberg@identry.com>
Date: Thu, 30 Apr 2009 21:44:12 -0400
To: freebsd-questions@freebsd.org
X-Mailer: Apple Mail (2.753.1)
Subject: Re: Is it necessary to generate a new SSL request each year?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 01 May 2009 01:44:19 -0000

>>>
>>>  You can reuse the old one.
>>
>> 	I'm not an expert on these, but it was my understanding that
>> certificates carry in internal "expiration date" after which the
>> application may respond as it pleases.
>
> Yes, but the *request* does not.
> Also, if using openssl, just set the defaults in /etc/ssl/ 
> openssl.cnf to your
> values, so you can enter through the questions

Cool... save a minute here and a minute there... at the end of a  
year, I might have enough saved up to take lunch!

-- John