Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Renewing a Self-Signed Web Certificate (CTPView Server Menu)

Before you begin, log in to the CTPView server and access the CTPView Configuration Menu. See Accessing the CTPView Server Configuration Menu (CTPView Server Menu).

To renew a self-signed Web certificate:

  1. Verify that the existing certificate has expired by running the command openssl x509 -noout -text -in <your_cert.crt> | grep -i -A2 validity.

    [juniper_sa@ctpview /tmp 29]$ openssl x509 -noout -text -in <your_cert.crt> | grep -i -A2 validity

  2. Renew the certificate for 10 years by running the command openssl x509 -req -in <your_cert.csr> -days 3650 -signkey <your_cert.key> -out <your_cert.crt>.

    [juniper_sa@ctpview /tmp 59]$ openssl x509 -req -in <your_cert.csr> -days 3650 -signkey <your_cert.key> -out <your_cert.crt>

  3. Verify the modulus of the original server key by running the command openssl rsa -noout -modulus -in <your_cert.key> and the modulus of renewed certificate by running the command openssl x509 -noout -modulus -in <your_cert.crt>. They must match.
  4. Verify the validity of the renewed certificate by running the command openssl x509 -noout -text -in <your_cert.crt> | grep -i -A2 validity.

Related Documentation