Confirming SuperAdmin lifetime <= CA lifetime #210
Credentive-Sec
started this conversation in
General
Replies: 1 comment
-
|
Indeed, the Management CA (or any CA) cannot issue a certificate longer than its own expiry date. Cheers, |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
Because I'm running this in a lab, I set the EJBCA lifetime to be quite short (1 year). I'm assuming that the SuperAdmin lifetime must be less than or equal to the CA lifetime. Is that a safe assumption?
Beta Was this translation helpful? Give feedback.
All reactions