Renew a SSL certificate

Bruno Wolff III bruno at wolff.to
Fri Apr 20 15:20:28 UTC 2007


On Fri, Apr 20, 2007 at 10:28:21 +0200,
  Dario Lesca <d.lesca at solinos.it> wrote:
> 
> I don't want create a new certificate but renew the existent
> certificate, in man page the word 'renew' there is not.

If you mean 'certificate' as a whole, this isn't possible, as the expiration
date is part of the certificate. If you really mean make a new certificate
with the same public key that has a new expiration date, that is possible,
but is normally a bad thing to do.

> How to I can renew the existing SSL certificate with genkey?

You might not be able to easily do this. In theory it should be possible
becausse you still have the private key and can self sign a new certificate
with a modified expiration date.




More information about the users mailing list