Expiring certificate
#251 Henry, Wednesday, 06 May 2015 10:03 PM (Category: Web Development)
(Tags: certificate https)

I was doing some work on my ownCloud website, and Firefox popped up a warning about the certificate. I set it up to use https and I originally signed the certificate myself, so every nanny browser likes to warn me again and again that it's a self-signed certificate and I have got in the habit of just trusting it and moving on. I thought the same thing had happened.

Then my friend Bill emailed me saying that my certificate had expired. I had set Bill up with an RSS reader through ownCloud, and he has the same thing with certificates. But Bill reads his warning messages. My certificate had expired.

Wow, it's been a year already? I checked, and it sure had been. Time to generate a new certificate. But first, didn't I just read about Google or some other company offering free signed certificates soon? I couldn't find that article again. Eventually, I will get an externally validated certificate for my ownCloud, but for now, when there are two users, only two, I am not prepared to spend $100 a year on a certificate.

I generated my own certificate again, put it into place, and we were good for another year. I added a reminder to my calendar so next year, I will be alerted to the expiring certificate a week in advance and I can generate a new one early. Or investigate if someone is offering them cheap.

This is what I used to generate the certificate.

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout cloud.hgriggs.com.key -out cloud.hgriggs.com.crt