Some of the Hono demo certificates have expired

[vladrotea]

Some of the included demo certificates from https://download.eclipse.org/hono/eclipse-hono-deploy-0.8.tar.gz have expired.

$ openssl x509 -enddate -noout -in hono-demo-certs-jar/auth-server-cert.pem
notAfter=Mar  2 11:32:14 2019 GMT
$ openssl x509 -enddate -noout -in hono-demo-certs-jar/mqtt-adapter-cert.pem
notAfter=Mar  2 11:32:15 2019 GMT

This makes some of the containers deployed using the Hono deploy script fail.

[eriksven]

We need to update the deployment to the newest version of Eclipse Hono anyway. This should also include more recent certificates from the Eclipse Hono project. Until then our recommendation is to replace the expired certificates with your own certificates.

[eriksven]

In the meantime it is possible to use the demo certificates from Eclipse Hono 0.9 or to create own certificates e.g. by using this script: https://github.com/eclipse/hono/tree/master/demo-certs. In https://github.com/eclipse/kuksa.cloud/blob/master/deployment/eclipse-hono/deploy_hono_0.8.sh there is the parameter "DEMO_CERTS_PATH" which can be used to select the demo certificates to be used during the deployment of Eclipse Hono within Eclipse Kuksa.