Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an Ubuntu server on which, a long time ago, I secured access to a certain area, 'foo', via client side browser certificates.

I've just tried to access said site for the first time in a while, to be told that my certificate has expired.

I remember self signing the certificate, so it's not something that needs re-buying - although I'm not clear if it's the server certificate or client certificate that needs recreating.

The only tip is that /etc/ssl/ contains the following:

And my apache SSL conf contains (among other things):

SSLEngine on
SSLOptions +StrictRequire
#SSLCertificateFile /etc/ssl/certs/mainsite.crt
#SSLCertificateKeyFile /etc/ssl/certs/mainsite.key
SSLCertificateFile /etc/ssl/certs/foo_server_cert.pem
SSLCertificateKeyFile /etc/ssl/certs/foo_server_key.pem
SSLCACertificatePath /etc/ssl/certs
SSLCACertificateFile /etc/ssl/certs/foo_cacert.pem

How would I go about refreshing the certificate on the server and re-isntalling on my local machine?

share|improve this question

This article should get you going

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.