]> git.ipfire.org Git - people/ms/ipfire-2.x.git/commit
vpnmain.cgi: Add option to regenerate the host certificate
authorMichael Tremer <michael.tremer@ipfire.org>
Tue, 30 Jan 2024 17:16:00 +0000 (17:16 +0000)
committerMichael Tremer <michael.tremer@ipfire.org>
Tue, 30 Jan 2024 17:16:00 +0000 (17:16 +0000)
commit4e26b9890dc901998f16e2c811e2629036cd7e5b
treecf9c4f73be3b2660526cfdcbadf2d16f371c5def
parent725b05b934ded43a7cad919a09a2b0c8d83ee845
vpnmain.cgi: Add option to regenerate the host certificate

This is necessary since we now have a much shorter lifetime for the host
certificate. However, it is complicated to do this is which is why we
are copying the previous certificate and generate a new CSR. This is
then signed.

A caveat of this patch is that we do not rollover the key.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
13 files changed:
config/ssl/openssl.cnf
doc/language_issues.de
doc/language_issues.en
doc/language_issues.es
doc/language_issues.fr
doc/language_issues.it
doc/language_issues.nl
doc/language_issues.pl
doc/language_issues.ru
doc/language_issues.tr
doc/language_missings
html/cgi-bin/vpnmain.cgi
langs/en/cgi-bin/en.pl