The certificate for <host> will expire in <x> days

Issues related to applications and software problems
Post Reply
neuronetv
Posts: 89
Joined: 2012/01/08 21:53:07

The certificate for <host> will expire in <x> days

Post by neuronetv » 2015/09/01 08:37:00

I'm running centos 6 and I got this message about two weeks ago and since then I've done the instructions on this page twice:
http://www.stevejenkins.com/blog/2010/0 ... oracentos/
but still the email keeps coming every day and I've only got 13 days left to solve this. Is there any way of verifying that all will be ok when this message expires?

User avatar
TrevorH
Site Admin
Posts: 33219
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: The certificate for <host> will expire in <x> days

Post by TrevorH » 2015/09/01 10:40:28

Check /etc/httpd/conf.d/ssl.conf and make sure that the files it points to are the ones you are updating.

You did restart the service after installing the new files?
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

neuronetv
Posts: 89
Joined: 2012/01/08 21:53:07

Re: The certificate for <host> will expire in <x> days

Post by neuronetv » 2015/09/02 07:57:06

I did /etc/init.d/httpd restart if that's what you mean (?)

User avatar
TrevorH
Site Admin
Posts: 33219
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: The certificate for <host> will expire in <x> days

Post by TrevorH » 2015/09/02 08:11:27

Yes. Or more correctly service httpd restart but it amounts to the same thing (more or less). How about the file locations?
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

neuronetv
Posts: 89
Joined: 2012/01/08 21:53:07

Re: The certificate for <host> will expire in <x> days

Post by neuronetv » 2015/09/02 08:24:18

I looked in /etc/httpd/conf.d/ssl.conf and I'm confused and don't know where to start there's so much stuff in there. Is there a particular entry i should be looking for?

User avatar
TrevorH
Site Admin
Posts: 33219
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: The certificate for <host> will expire in <x> days

Post by TrevorH » 2015/09/02 10:21:46

In the default file you need to look at the lines that contain SSLCertificateFile, SSLCertificateKeyFile and possibly SSLCertificateChainFile. Those tell the server where to find its certificate files and if your new ones are not being pointed to then that explains why they are not in use.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply