SSL Buying commercial SSL certificates are expensive, so I setup my own CA in /etc/ssl/CA Renewing a certificate First revoke the old certificate openssl ca -revoke newcerts/02.pem -config ./openssl.cnf Then re-sign the request openssl ca -out cert.pem -config ./openssl.cnf -infiles server-req.pem Create new certificate Create request openssl req -new -nodes -out server-req.pem -config ./openssl.cnf Sign [...]