Certificate Hell


Yeah I'm gonna burn out doing blogs soon enough. But I have so much to say! Earlier was just a follow up to yesterday so here is what I've been working on since noon.

Well last year around Thanksgiving my email server secure certificates expired and so I dreaded having to re-learn how to do this. I figured renewing would be cake. I really couldn't find much in howto's for doing this. So last year I just created a new one and oddly with an expired CA to the best of my knowledge. At any rate I just did a one year since I figured I would/should have upgraded or moved on by this time now. Trust me I have been trying to but very slowly. So I found a howto for renewing your certs. First off I followed the directions and all was swell. Then trying to get Thunderbird (TB) to take/see the new certs didn't fare as well. Then I found that my CA expired in like August of 2004! Then after creating new ca and certs TB still didn't see the new one. Aha! Forgot about the flip side of SMTP... IMAP. I thought I would cheat and just do a symlink to the existing postfix cert but that didn't go well. Then I found the makeimapcert script and used that to renew one more year.

Syndicate content