devcert icon indicating copy to clipboard operation
devcert copied to clipboard

Root authority certificate renewal

Open wessberg opened this issue 7 years ago • 3 comments

screen shot 2018-06-09 at 1 42 25 am

Hey there. The root certificate that devcert has generated and installed appears to have a lifetime of one month as seen in the image above. Am I missing something, or shouldn't there be a process for automatic renewal of the root certificate?

I'm on MacOS High Sierra and solved it by removing private-key.key and certificate.cert inside ~/Library/Application Support/devcert/certificate-authority, then removing all domains from the index.txt inside the same folder as well as all domains within ~/Library/Application Support/devcert/domains to force devcert into generating and signing new certificates.

wessberg avatar Jun 08 '18 23:06 wessberg

I just ran into this issue too. I thought I could just delete the certs and the ~/Library/Application Support/devcert dir and start again but I got errors after deleting that and trying to run devcert. Is there a recommended way to renew?

I seem to remember that the old version of devcert that installed to .config gave a reallllly long validity certificate, but this one is only one month. Why the change?

jeffwillette avatar Jun 19 '18 12:06 jeffwillette

On Windows check out this post to delete the devcert from the Trusted Root Certification Authorities then open ${User}\AppData\Local\devcert and delete everything inside certificate-authority.

dcflow avatar Oct 30 '18 17:10 dcflow

To me this issue is resolved by https://github.com/davewasmer/devcert/pull/24. There is no strategy about root certificate expiring after 7000 days but that's less important than when they expired after 1 month :)

dmail avatar Aug 13 '21 14:08 dmail