[Pkg-openssl-devel] Bug#176062: Seems fixed in 0.9.8b-2

[Phil Endecott]

This was fixed in 0.9.8.

You need to put "unique_subject = no" in the ca section of your
configuration file and it will let you have more than one certificate
for the same DN, i.e. a new one when your old one expires.  (Search
for "subject" in the changelog.)

I suggest that this line is added to the default configuration file.

Phil.