Ask Your Question
0

Received a SSL Certificate expiry warning mail from certwatch

asked 2013-09-12 10:39:34 -0500

sergiomb gravatar image

I receive everyday:

Subject: The certificate for segulix has expired
Status: O

 ################# SSL Certificate Warning ################

  Certificate for hostname 'segulix', in file (or by nickname):
     /etc/pki/tls/certs/localhost.crt

  The certificate needs to be renewed; this can be done
  using the 'genkey' program.

  Browsers will not be able to correctly connect to this
  web site using SSL until the certificate is renewed.

 ##########################################################
                                  Generated by certwatch(1)

What needs to be done to renew my certificate ?

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
0

answered 2013-09-15 13:54:48 -0500

sergiomb gravatar image

updated 2013-09-15 14:33:33 -0500

cd /etc/pki/tls/certs/
rm localhost.crt
make localhost.crt
mv localhost.key ../private/localhost.key
cd ../private/
cp localhost.key localhost.key.orig
openssl rsa -in localhost.key.orig -out localhost.key

done

or just:

cd /etc/pki/tls/certs/
make testcert
edit flag offensive delete link more
0

answered 2013-09-15 12:31:53 -0500

besser82 gravatar image

As the message says you should use genkey to generate a new certificate and replace the existing /etc/pki/tls/certs/localhost.crt with the new one.

edit flag offensive delete link more

Comments

genkey what ? that is the question

sergiomb gravatar imagesergiomb ( 2013-09-15 13:25:56 -0500 )edit

aah now we need genkey --test localhost , makefile not exist anymore though

sergiomb gravatar imagesergiomb ( 2019-02-11 13:34:06 -0500 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2013-09-12 10:39:34 -0500

Seen: 4,232 times

Last updated: Sep 15 '13