Koozali.org: home of the SME Server

phpki server certificate - how to replace?

Offline ttech

  • 8
  • +0/-0
phpki server certificate - how to replace?
« on: July 02, 2019, 02:25:20 PM »
Hi!
On a new server, I was installing openssl + phpki and an error occurred.  While creating the initial CA certificate for the server, it produced a rather short certificate... about 10 lines.  This seems too low (for 2048/15yrs).
  Is there an recommended way to delete the current CA one and generate a new one?  I didn't find anything about regeneration in the forum or wiki page.
  Thanks in advice for any pointers for how to fix this.  BTW, I followed the wiki on uninstalling and re-installed it, but the certs on try 2 were short also.  Did the initial install leave something behind after the removal of the /opt/phpki directory (per the wiki)?

Offline calisun

  • *
  • 601
  • +0/-0
Re: phpki server certificate - how to replace?
« Reply #1 on: September 16, 2019, 05:05:30 AM »
Just go to PHPKi / Manage certificates and you will see an option to revoke certificate. Once you revoke a certificate, you will be able to generate a new one.
I also have (for 2048/15yrs) and my CA certificate is about 28 lines long.
SME user and community member since 2005.
Want to install Wordpress in iBay of SME Server?
See my step-by-step How-To wiki here:
http://wiki.contribs.org/Wordpress_Multisite

Online ReetP

  • *
  • 3,722
  • +5/-0
Re: phpki server certificate - how to replace?
« Reply #2 on: March 04, 2020, 07:52:19 PM »
If anyone is interested I am doing a big update on phpki.

The old version has a lot of issues. The new one fixes them and massively increases the security.

If you want to help test then let me know. I really needs some hands on it.

I can give you a login to our rocket.chat instance where you can join in the conversation.

Let me know.
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation