Apache: renew self-signed certificate

  1. change directory
    cd /etc/apache2/ssl/
  2. generate openssl key
    openssl genrsa -out joel.feggm.de.key 2048
  3. change file permissions
    chmod 600 joel.feggm.de.key
  4. create a certificate request file
    openssl req -new -key joel.feggm.de.key -out joel.feggm.de.csr
  5. self-sign the certificate
    openssl x509 -req -days 365 -in joel.feggm.de.csr  -signkey joel.feggm.de.key -out joel.feggm.de.crt
  6. move old certificate to *.old
    mv apache.pem apache.pem.old
  7. copy new key to old file
    cp joel.feggm.de.key apache.pem
  8. attach new certificate to old file
    cat joel.feggm.de.crt >> apache.pem
  9. change file permissions
    chmod 600 apache.pem
  10. restart apache daemon
    service apache2 restart