$ sudo debconf-show ssl-cert make-ssl-cert/title: make-ssl-cert/altname: make-ssl-cert/vulnerable_prng: make-ssl-cert/hostname: localhost $ sudo dpkg-reconfigure ssl-cert $ sudo dpkg-reconfigure -p low -f dialog ssl-cert $
dpkg-reconfigure is expected to re-ask the debconf questions (which were not asked at install time, presumably due to a
low priority). But it doesn't in this case. What causes this?
I'm asking out of curiosity. Having looked at
/var/lib/dpkg/info/ssl-cert.postinst, I don't think changing the
hostname question would affect the installed certificate. (You have to use
make-ssl-cert generate-default-snakeoil --force-overwrite instead, as per the wiki).
The above results come from a Debian Stretch system.