Skip to content

Renew client certificate to connect to the server #41

@romain-jacob

Description

@romain-jacob

The certificates that allow the clients to connect to the autopower server expire after a year. The consequence is the client will no longer manage to connect to the server after rebooting.

This can be fixed by

  • renewing the client certificate on the server: openssl x509 -req -in /usr/autopower/certs/client_${DEVICENAME}.csr -CA /usr/autopower/certs/ca.cer -CAkey /usr/autopower/certs/ca.key -CAcreateserial -out /usr/autopower/certs/client_${DEVICENAME}.cer -days 365 -sha512 -passin pass:'${PASSPHRASE}'
  • copy the resulting .cer file to the client under /etc/mmclient/client.cer
  • resrarting mmclient: sudo systemctl restart mmclient

It would be nice to have a simple script to handle those steps... kinda annoying to do it manually :-/

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions