Differences

This shows you the differences between two versions of the page.

--- public:radio:2025:yaddnet_ssl_renewal [15/03/25 07:09 GMT] – [15/03/25 : SSL certificates] john
+++ public:radio:2025:yaddnet_ssl_renewal [17/03/25 07:03 GMT] (current) – [YaDDNet VPS SSL Renewal] john
@@ Line 2: / Line 2: @@
-====== Yaddnet VPS SSL Renewal ======
+====== YaDDNet : VPS SSL Renewal ======
 ** Renewed SSL certificates for 2025/6 **
@@ Line 25: / Line 25: @@
       * ''/usr/local/ssl/ca.pem.1''
       * ''/usr/local/ssl/ca.pem.2''
-      * copy ''ca.pem.1'' -> ''ca.pem''
+      * copy ''ca.pem.2'' -> ''ca.pem''
     * Restart Apache
       * ''service apache2 restart''
@@ Line 32: / Line 32: @@
       * check site security
-{{:public:radio:2025:screenshot_2025-03-15_064708.png?400|}}
+{{:public:radio:2025:screenshot_2025-03-15_072557.png?400|}}
-  * swap ''ca.pem'' files (copy ''ca.pem.2'' -> ''ca.pem'')
+  * swap ''ca.pem'' files (copy ''ca.pem.1'' -> ''ca.pem'')
   * Restart Apache
   * browse to [[https://www.yaddnet.org/index.php?]]
@@ Line 44: / Line 44: @@
 I used openssl to inspect the two different //intermediate// certificates
-for ca.pem.1
+<code>gm4slv@yaddnet2:~ $ openssl x509 -in ca.pem -noout -text > /home/gm4slv/capemold.txt</code>
+  * for ca.pem.1
 <code>
@@ Line 61: / Line 64: @@
 </code>
-For ca.pem.2
+  * or ca.pem.2
 <code>
@@ Line 77: / Line 80: @@
 </code>
-and for completeness the //old// original ca.pem from prior to the renewal
+  * and for completeness the //old// original ca.pem from prior to the renewal
 <code>
@@ Line 93: / Line 96: @@
 </code>
+It appears that the certificate (ca.pem.2) from "Sectigo" has the longest validity, and that this is the more recent/appropriate one, so I've made it the certificate in use
+''sudo cp ca.pem.2 ca.pem''
+''sudo service apache2 restart''
@@ Line 102: / Line 109: @@
-{{tag>}}
+{{tag>yaddnet radio}}