Description of problem: We can create a self-signed cert for 1 year with /etc/pki/tls/certs/make-dummy-cert (or similarly, with the Makefile in the same directory), but there's no accompanying scripting to re-issue a cert good for another year. Version-Release number of selected component (if applicable): openssl-1.0.0j-1 How reproducible: Steps to Reproduce: 1. Generate a cert with make-dummy-cert 2. Wait 1 year 3. Try to reissue an updated cert... you can't with the existing scripting Actual results: Expected results: Additional info:
Can we get an estimate of when this might be fixed? Thanks.
Unfortunately I cannot give you such estimate. I suggest you to work with upstream on this issue.
(In reply to comment #2) > Unfortunately I cannot give you such estimate. I suggest you to work with > upstream on this issue. The make-dummy-cert and makefile aren't part of the tarball, so I'm assuming they aren't part of what comes from upstream either. That suggests that they are Fedora-isms.
Heh, you're right. Anyway I'd suggest you to provide a patch that would implement this functionality if you want to get the functionality included in Fedora as soon as possible.
Created attachment 653118 [details] Renew a PEM file
Included with the name renew-dummy-cert along the make-dummy-cert script.