How do other people renew host certificates?
Currently to renew a certificate on one of our CEs/SEs/APEL etc
machines, I combine the private key and certificate into .p12 format,
load it into my browser and renew it over the web.
This is all a bit of a pain - there's got to be a better way. I've
previously been pointed at http://wiki.ngs.ac.uk/index.php?title=PeCR
AFAICT, with this tool it is possible (or at least documented) to use
the --server option to request a certificate without a passphrase, but
this doesn't work for a renewal.
Chris
|