LinuxQuestions.org - Setting a new expiration date on a .pem file for apache

- Red Hat (https://www.linuxquestions.org/questions/red-hat-31/)

- - Setting a new expiration date on a .pem file for apache (https://www.linuxquestions.org/questions/red-hat-31/setting-a-new-expiration-date-on-a-pem-file-for-apache-745933/)

Setting a new expiration date on a .pem file for apache

I've created a self-signed .pem file for encryption by running make <hostname>.pem in /etc/pki/tls/certs for use in my httpd.conf file.

The expiration date for the certificate is coming up and I usually just create a new .pem file to get around this but that requires that people that browse to the site install the new certificate. I'm relatively sure that's not the "correct" way to handle this situation.

What is the proper procedure for extending/resetting the expiration date on the existing .pem file?

thx-

Quote:

Originally Posted by ivanmarsh (Post 3635291)

What is the proper procedure for extending/resetting the expiration date on the existing .pem file?

You don't. The proper way is to create a new certificate. Requiring people to install a new certificate shows them you take care of things (in contrast to trying to find workarounds, kludges or whatever else).