ASG
IBM
Zystems
Cressida
Icon
Netflexity
 
  MQSeries.net
Search  Search       Tech Exchange      Education      Certifications      Library      Info Center      SupportPacs      LinkedIn  Search  Search                                                                   FAQ  FAQ   Usergroups  Usergroups
 
Register  ::  Log in Log in to check your private messages
 
RSS Feed - WebSphere MQ Support RSS Feed - Message Broker Support

MQSeries.net Forum Index » IBM MQ Security » SSL Certificate Expiration

Post new topic  Reply to topic
 SSL Certificate Expiration « View previous topic :: View next topic » 
Author Message
tisaroo55
PostPosted: Fri Sep 26, 2014 8:53 am    Post subject: SSL Certificate Expiration Reply with quote

Novice

Joined: 05 Nov 2012
Posts: 12
I created a certificate request with the following command:
gsk7cmd -certreq -create -db key.kdb -pw somepassword -label "ibmwebspheremqservername" -dn "CN=servername.domain.com" -size 1024 -file queuemanagername_request.csr

And when I send it to my security team to be signed by our certificate authority I get back a certificate that has an expiration 2 years in the future. I asked for a 4 year expiration time from said security guy but he said the expiration time is handled in my .csr request rather than on the certificate authority. I am not sure I believe him. I cannot find a gsk7cmd command to change the certificate expiry time.
Thoughts on how to do this?
Thanks.
Back to top
View user's profile Send private message
tisaroo55
PostPosted: Fri Sep 26, 2014 8:55 am    Post subject: I did not do "ibmwebspheremqservername" Reply with quote

Novice

Joined: 05 Nov 2012
Posts: 12
In my command I did "ibmwebspheremqqueuemanagername", I just edited this command wrong before posting it....
Back to top
View user's profile Send private message
exerk
PostPosted: Fri Sep 26, 2014 2:04 pm    Post subject: Reply with quote

Jedi Council

Joined: 02 Nov 2006
Posts: 6339
As far as I am aware - and am happy to be corrected - it's the CA that sets the expiry on the certificate.
_________________
It's puzzling, I don't think I've ever seen anything quite like this before...and it's hard to soar like an eagle when you're surrounded by turkeys.
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic  Reply to topic Page 1 of 1

MQSeries.net Forum Index » IBM MQ Security » SSL Certificate Expiration
Jump to:  



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Protected by Anti-Spam ACP
  
 


Theme by Dustin Baccetti
Powered by phpBB © 2001, 2002 phpBB Group

Copyright © MQSeries.net. All rights reserved.