I do it all by hand, like you. It's a pest.
Christopher J. Walker wrote:
> How do other people renew host certificates?
> Currently to renew a certificate on one of our CEs/SEs/APEL etc
> machines, I combine the private key and certificate into .p12 format,
> load it into my browser and renew it over the web.
> This is all a bit of a pain - there's got to be a better way. I've
> previously been pointed at http://wiki.ngs.ac.uk/index.php?title=PeCR
> AFAICT, with this tool it is possible (or at least documented) to use
> the --server option to request a certificate without a passphrase, but
> this doesn't work for a renewal.
Steve Jones [log in to unmask]
System Administrator office: 220
High Energy Physics Division tel (int): 42334
Oliver Lodge Laboratory tel (ext): +44 (0)151 794 2334
University of Liverpool http://www.liv.ac.uk/physics/hep/