cp -p /etc/pki/tls/{openssl.cnf,openssl.cnf.`date +"%Y%m%d"`} vi /etc/pki/tls/openssl.cnf diff -u openssl.cnf.20140510 openssl.cnf --- openssl.cnf.20140510 2014-04-07 20:26:41.000000000 +0900 +++ openssl.cnf 2014-05-10 05:50:21.198111607 +0900 @@ -70,9 +70,9 @@ # crlnumber must also be commented out to leave a V1 CRL. # crl_extensions = crl_ext -default_days = 365 # how long to certify for +defaul