Thursday, May 7, 2009

Oh no! My SSL Certificate Expired.

For the last few days I have been getting emails from my server to the tune of:
################# SSL Certificate Warning ################
Certificate for hostname 'myserver.example.com', in file:
/etc/pki/tls/certs/myserver.example.com.cert

The certificate needs to be renewed; this can be done
using the 'genkey' program.

Browsers will not be able to correctly connect to this
web site using SSL until the certificate is renewed.

##########################################################
Generated by certwatch(1)

which leads me to believe my certificate has expired. I logged into my site and sure enough, it expired 30-days after I created it. I don't think I have ever had a certificate with such a short life.