OpenSSL How To Renew A Certificate

In this video we show you how to renew a SSL/TLS certificate created in OpenSSL

Using OpenSSL as a Certificate Authority is a manual process and at some point a certificate will expire which will need to be replaced

When that happens a web browser may refuse to let you access the server, so it's best to renew it before it expires

=============================
SUPPORT THE CHANNEL
Donate through Paypal:
Donate through Buy Me A Coffee:
Become a monthly contributor on Patreon:
Become a monthly contributor on YouTube:
==============================

==============================
MEDIA LINKS:
==============================

Steps Taken
1) Revoke Existing Certificate
You can't extend the expiry date of an existing certificate

Instead, you have to create a new one

But as the details used are the same, we''re basically renewing it

Now, if you already have the CSR and SAN config files in the CA, you can use these to make the process easier, but OpenSSL will complain

Because even if a certificate has expired, it won't let you create a certificate if one already exists in the database for that common name

So the first thing we have to do is to revoke the existing certificate, for example

2) Create New Certificate
Now you can create a new certificate for your server

For example

In other words, we run the exact same command that was used to create the orignal certificate

TIP: You can check a certificate contains the Subject Alternative Name details before using a command like this

3) Replace Certificate
Finally, you should replace the certificate on the server with this new one

Chapters
00:00 Intro
00:33 Revoke Existing Certificate
02:36 Create New Certificate
03:50 Summary

Credits
LoveLife | Instrumental Prod. Blue Mango | EQMUSEQ.COM by Don Da Vinci

openssl renew x509 certificate,openssl renew certificate,openssl replace certificate,openssl certificate expired,openssl expired certificate,openssl revoke certificate,openssl,ssl,ssl certificate

[leibaleibovich]

Greetings, David!

Thank you very much for all detailed tutorials that you are producing! These are much better than average ~10 min videos out there.

My apologies for a somewhat off-topic comment, but I would really appreciate if you could stir me in the right direction.

**Here is the basic setup**:

I have a laptop with Linux installed on it. The machine is decent, but fairly old and unfit for a serious computational work. Lets say, I would like to buy a "mini-PC" and install Linux on it (it could also be Jetson Nano!). Granted, the "mini-PC" is not exactly a supercomputer, but it will have more modern CPU, more hard-drive storage and could be left to run by itself for long periods of time, while I am using the laptop for other tasks.
Here are limitations:
(a) I do not have space for a proper monitor to attach my "mini-PC" to;
(b) I do not have a router either (or a home network for that matter);
(c) last, but not least, I am a novice and fairly inexperienced with IT technology and networking (which is my main concern).

To be clear, (a) and (b) are simply limitations of an place that I rent.

I am wondering if I can connect the laptop and the "mini-PC" by an Ethernet cable and create a "network" of two machines. Essentially, I would use my laptop as a keyboard and a screen to connect to the "mini-PC", do some work on it, launch some tasks, disconnect. Hopefully, my description is not too confusing!

I am wondering what type of cable do I need (e.g. crossover cable?) and what type of software I need to install for this improvised "remoting"? Are there any alternatives to abovementioned approach?
I am rather inexperienced, so any guidance will be appreciated!

[rajeshbokke]

Hello sir,

Please provide commands aswell.

Thanks.