CA problems (openssl)

hi
I've setup own CA to sign encryption keys for http/mail/ipsec etc.
everything works just fine, but at the time of making CA (generating keys
and self-signing my certificate) i made my cacert.pem valid for 1 year and
it is ending now.
What should i do, to save my work, should i generate new keys and self-sign
them
or just generate new self-signed certificate or what?
And when i do that (whatever) must i recetify all my keys, or is there
another way
thnaks

On Tue, 08 Jul 2003 17:37:26 +0200, raber wrote:

> hi
> I've setup own CA to sign encryption keys for http/mail/ipsec etc.
> everything works just fine, but at the time of making CA (generating
> keys and self-signing my certificate) i made my cacert.pem valid for 1
> year and it is ending now.
> What should i do, to save my work, should i generate new keys and
> self-sign them
> or just generate new self-signed certificate or what? And when i do that
> (whatever) must i recetify all my keys, or is there another way
> thnaks

This may be better posted to an openssl or crypto newsgroup.

Brook Keele