Renewing Apache-SSL Certificates in Debian

AUGUST 9, 2004

I've been looking for a simple summary of how to regenerate Apache's SSL certificate, since the once created by the Debian installation script is only good for a month. I finally found one today, appropriately titled, "Howto renew your expired Apache SSL certificate in Debian". The commands are:

 cd /etc/apache-ssl
 openssl genrsa -out www.euhq.org.key 1024
 chmod 600 www.euhq.org.key
 openssl req -new -key www.euhq.org.key -out www.euhq.org.csr
 openssl x509 -req -days 730 -in www.euhq.org.csr -signkey www.euhq.org.key -out www.euhq.org.crt
 mv apache.pem apache.pem.old
 cp www.euhq.org.key apache.pem
 cat www.euhq.org.crt >> apache.pem
 chmod 600 apache.pem
 /etc/init.d/apache-ssl restart