GNU/Linux Desktop Survival Guide
by Graham Williams |
|||||
Renew SSL Certificate |
Our example uses a self-signed certificate. To renew the certificate for 365 days (for apache1 or apache2):
# cd /etc/apache2/ssl # openssl genrsa -out togaware.com.key 1024 # chmod 600 togaware.com.key # openssl req -new -key togaware.com.key -out togaware.com.csr AU ACT Canberra Togaware Data Mining Kayon Toga Kayon.Toga@togaware.com (no challenge password) # openssl x509 -req -days 365 -in togaware.com.csr \ -signkey togaware.com.key -out togaware.com.crt # mv apache.pem apache.pem.old # cp togaware.com.key apache.pem # cat togaware.com.crt >> apache.pem # chmod 600 apache.pem # wajig restart apache2 |
A more detail explanation is available from http://www.euhq.org/debian-apache-ssl-howto.html.