Skip to content
This repository has been archived by the owner on Mar 19, 2022. It is now read-only.

a function "renew cert" is needed #57

Open
SvenRoederer opened this issue Dec 17, 2017 · 1 comment
Open

a function "renew cert" is needed #57

SvenRoederer opened this issue Dec 17, 2017 · 1 comment
Labels
enhancement

Comments

@SvenRoederer
Copy link
Contributor

SvenRoederer commented Dec 17, 2017 •
edited

in some cases it turns out that we need some code for renewing an expired certificate. This also requires some code, to check for soon expiring certs, that the user can be informed.

Following idea:

  • system daily checks for certificates expiring in the next 30 days and send a reminder to the user
    • this reminder contains a link for confirmation
  • when the user visits the link a new certificate is created based on the old data provided
    • same cert-subject and email
    • same private-key is used
  • the existing record in the database is updated to the new expiry-date
  • this new cert is send out without approval, as this was approved on the initial request also
SvenRoederer added a commit that referenced this issue Jan 11, 2018
@SvenRoederer
manage: add basic version of "cert_renew()"
8b9db13 
this can be used to renew expired certificates (see #57).
It will
* ask for an cert-id to renew (todo)
* lookup the current certificate data from the database
* load this requests private key
* get a new certificate-sn
* creates a new certificate from id, email, sn, pkey
* stores the new certificate data on disk
* updates the database
* sends the new certificate-data vvia email
@SvenRoederer
Copy link
Contributor Author

I just put a basic function to renew an existing certificate into branch https://github.com/freifunk-berlin/ca.berlin.freifunk.net/tree/renew_cert.
Please feel free to extend / finish this code

SvenRoederer added a commit that referenced this issue Mar 1, 2018
@SvenRoederer
manage: add basic version of "cert_renew()"
eab5eb9 
this can be used to renew expired certificates (see #57).
It will
* ask for an cert-id to renew (todo)
* lookup the current certificate data from the database
* load this requests private key
* get a new certificate-sn
* creates a new certificate from id, email, sn, pkey
* stores the new certificate data on disk
* updates the database
* sends the new certificate-data vvia email
sarumpaet pushed a commit that referenced this issue May 15, 2018
@SvenRoederer @sarumpaet
manage: add basic version of "cert_renew()"
c8930a5 
this can be used to renew expired certificates (see #57).
It will
* ask for an cert-id to renew (todo)
* lookup the current certificate data from the database
* load this requests private key
* get a new certificate-sn
* creates a new certificate from id, email, sn, pkey
* stores the new certificate data on disk
* updates the database
* sends the new certificate-data vvia email
@SvenRoederer SvenRoederer mentioned this issue May 15, 2018
Closed
SvenRoederer added a commit that referenced this issue May 15, 2018
@SvenRoederer
manage: add basic version of "cert_renew()"
4f1dc64 
this can be used to renew expired certificates (see #57).
It will
* ask for an cert-id to renew (todo)
* lookup the current certificate data from the database
* load this requests private key
* get a new certificate-sn
* creates a new certificate from id, email, sn, pkey
* stores the new certificate data on disk
* updates the database
* sends the new certificate-data vvia email
SvenRoederer added a commit that referenced this issue May 15, 2018
@SvenRoederer
manage: add basic version of "cert_renew()"
ccd0d8b 
this can be used to renew expired certificates (see #57).
It will
* ask for an cert-id to renew (todo)
* lookup the current certificate data from the database
* load this requests private key
* get a new certificate-sn
* creates a new certificate from id, email, sn, pkey
* stores the new certificate data on disk
* updates the database
* sends the new certificate-data vvia email
SvenRoederer added a commit that referenced this issue May 15, 2018
@SvenRoederer
manage: add basic version of "cert_renew()"
91702ac 
this can be used to renew expired certificates (see #57).
It will
* ask for an cert-id to renew (todo)
* lookup the current certificate data from the database
* load this requests private key
* get a new certificate-sn
* creates a new certificate from id, email, sn, pkey
* stores the new certificate data on disk
* updates the database
* sends the new certificate-data vvia email
SvenRoederer added a commit that referenced this issue Jun 20, 2018
@SvenRoederer
manage: add basic version of "cert_renew()"
3043556 
this can be used to renew expired certificates (see #57).
It will
* ask for an cert-id to renew (todo)
* lookup the current certificate data from the database
* load this requests private key
* get a new certificate-sn
* creates a new certificate from id, email, sn, pkey
* stores the new certificate data on disk
* updates the database
* sends the new certificate-data vvia email
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
enhancement
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@SvenRoederer