Server Certificate Expired - How to Renew?

[batesenergy]

Our server certificate has expired and clients are unable to connect! How do we renew the server certificates? or extend its expiration?

This is for a production VPN so any quick help would be greatly appreciated!

[nrukavkov]

the same problem

[nrukavkov]

@batesenergy I removed previous certificate and create a new one with the same name. Here is a example https://github.com/angristan/openvpn-install/issues/1002#issuecomment-1229525488

[batesenergy]

Did this work for you?

Patrick Bates Open IoT Group 207.242.6313

On Sun, Jan 8, 2023, 1:45 PM Nikita Rukavkov @.***> wrote:

@batesenergy https://github.com/batesenergy I removed previous certificate and create a new one with the same name. Here is a example angristan/openvpn-install#1002 (comment) https://github.com/angristan/openvpn-install/issues/1002#issuecomment-1229525488

— Reply to this email directly, view it on GitHub https://github.com/kylemanna/docker-openvpn/issues/731#issuecomment-1374901105, or unsubscribe https://github.com/notifications/unsubscribe-auth/AMCAJGPP6BGBXV3E34RYR2DWRMDOJANCNFSM6AAAAAATTSLLUA . You are receiving this because you were mentioned.Message ID: @.***>

[nrukavkov]

@batesenergy yes

[batesenergy]

For those who run into the same issue. Here are the changes we made to fix this issue:

server_cn= "Server Common Name" mv /etc/openvpn/pki/reqs/$server_cn.req /etc/openvpn/pki/reqs/$server_cn.req.backup mv /etc/openvpn/pki/private/$server_cn.key /etc/openvpn/pki/private/$server_cn.key.backup mv /etc/openvpn/pki/issued/$server_cn.crt /etc/openvpn/pki/issued/$server_cn.crt.backup cd /etc/openvpn easyrsa build-server-full $server_cn nopass

Then reboot the container to take effect.