Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I have in /etc/httpd/ssl subdir two files: apache.crt and apache.key. How can I extend time of validity of APACHE http server, without creating new certificate and without necessity of interaction from client site? It is important for me because current cert is valid only 30 days and I want to extend to 1 year.

share|improve this question

1 Answer 1

up vote 3 down vote accepted

You can't.

The validity time is encoded into the certificate. The only way to extend it is to contact the issuer of the certificate and get a new one.

If you don't want to replace the key, you can sign the new request with the same key as the old one. But you still need to replace the actual apache.crt with the new one.

share|improve this answer
    
But it is self signed cert, generated during ordinary installation of Apache from ready RPM. So what can I do now to generate new one apache.crt with 1 year validity? –  mackowiakp Mar 25 at 14:58
    
You generate a new self-signed cert in the same way that you generated the previous one. –  Jenny D Mar 25 at 14:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.