On 11/26/2013 03:03 PM, Bill Thoen wrote: > Yesterday and today I received this notice: > > ################# SSL Certificate Warning ################ > > Certificate for hostname 'server.gisnet.com', in file (or by nickname): > /etc/pki/tls/certs/localhost.crt > > The certificate needs to be renewed; this can be done > using the 'genkey' program. > > Browsers will not be able to correctly connect to this > web site using SSL until the certificate is renewed. > > ########################################################## > Generated by certwatch(1) > > > I have no clue what to do about this, so I went to Google and asked the > planetary brain for guidance. I must not have asked the question carefully > enough, because I didn't get much of an answer. I did get a Googlet that told > me that this was from root on my server, and it's telling me replace or renew > the certificate on my server so that won't block people browsing my site. > > Now I'm stuck. I've run out of knowledge. I have only a vague understanding > of certificates and I don't know which kind of cert I need or which renew > command to use. Could someone help me choose the right option to use for > genkey and give that notice what it wants to see? > > > Thanks so much, > - Bill Thoen >
Since you are stumped, I would guess you did not set up the server. As it is your web site, is someone else hosting it? Your webhost and/or domain provider will need to update the cert, if all you are doing is pushing HTML up with ftp, etc. If this is your linux box and you are hosting the site under your desk | colocation | etc, then how (or who) created the original cert? >From the message above, and the file path, it looks like your distro uses the 'crypto-utils' package. This package includes the CLI program "genkey" to create self signed certs for submission to a Certificate Authority. http://docs.fedoraproject.org/en-US/Fedora/14/html/Deployment_Guide/s2-apache-mod_ssl-genkey.html FYI, grasshopper, google "genkey" leads to a man page that points to "crypto-utils" that, when googled, leads to self signed certs tutorials in various distros. -Ed _______________________________________________ PLUG mailing list [email protected] http://lists.pdxlinux.org/mailman/listinfo/plug
