<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 12/4/2014 9:58 AM, Brian V wrote:<br>
</div>
<blockquote cite="mid:00bc01d00fdb$1e0a2460$5a1e6d20$@gmail.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]-->
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Customer provided me their root CA and
intermediate CA (internal) to load on the VCS-C<o:p></o:p></p>
<p class="MsoNormal">The intermediate cert (expires in 20 yr) is
loaded fine, when loading the root cert (expires in 40 yr) it
says its already expired in 1969 !<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is there a limit on the length of a Cert or
perhaps just a bug in code ?<o:p></o:p></p>
<p class="MsoNormal">Anyone run into this before ?<o:p></o:p></p>
<p class="MsoNormal">This is the longest I've seen someone sign
a cert for. Is this common to use such a long duration ?<o:p></o:p></p>
<p class="MsoNormal">I have a TAC case open, still waiting to be
contacted by them.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<br>
</div>
</blockquote>
<br>
First thought would be 32-bit UNIX time wrapping in 2038. Pretty
sure that VCS is based on Linux. The 20 year cert would be within
that range, the 40 year one wouldn't be. I'd be curious if both of
them being 20 years resolves it.<br>
<br>
And I chuckled when I read it, we're going through headaches with
certs and renewals/replacements right now, and I really wish I could
do 40 years on them so I would be long gone before they expired and
had to be replaced again. ;-)<br>
<br>
Jeremy "TheBrez" Bresley<br>
<a class="moz-txt-link-abbreviated" href="mailto:brez@brezworks.com">brez@brezworks.com</a><br>
</body>
</html>