@RN
@StormyCloud
@T3s|4
@T3s|4_
@orignal
@postman
@zzz
%acetone
%mareki2p
%snex
+Atticfire
+FreefallHeavens
+Onn4l7h
+Onn4|7h
+Over
+fa
+marek22k
+onon_
+poriori
+profetikla
+qend-irc2p
+r00tobo
+sexy
+uberius
+uop23ip
Arch
Danny
Irc2PGuest21708
Irc2PGuest28384
Irc2PGuest66257
Irc2PGuest75631
Irc2PGuest99986
RTP_
ReturningNovice
U1F642
Watson
ahiru
anontor
cims
dr|z3d
i2potus
interesting
justaperson
lokzz
luvme
mahlay
makoto
n2_
nilbog
not_bob_afk
pinotto
r00tobo[2]
rednode
user_ygg2__
orignal
zzz, when do you plan to remove fmaily cetificates. They don't seem to expire yet
orignal
second question, how should I re-create gostocoin. It expires in 2027?
dr|z3d
the i2p and i2pd family certs have already been purged.
dr|z3d
I think we get a warning when the cert has less than 6 months to expire, so you're good for a while with gostcoin.
zzz
orignal, our build system starts warning 6 months in advance of expiration, so we don't do releases with about-to-expire certs
zzz
I've removed the two, and also "volatile.crt" that expires shortly thereafter, if you have that one
zzz
so they will be gone in next release
zzz
to renew, generate a new cert with the same private key, figure out how to make openssl do that ))
zzz
we have a java util to do that but it requires the private key to be in a java keystore
orignal
ofc I can generate new one
orignal
and I have volatile too
orignal
I also see mca2
orignal
not sure what's this
zzz
you asked how, that's how ))
orignal
I though maybe you need to sign new one with old one or something
zzz
nope, just a new cert with same key, that's it
mareki2p
Old cert expired (is about to expire) and you want to issue new cert with the same key with new expiry date...do I understand this correctly? Then why is there an expiry date in the first place? I thought that an cert is an envelope/carrier of key(s) (and other things) and the expiry date is the key's expiry date. So that keys could be re-newed. Nobody should be trusting to a an expired key.
zzz
private keys don't expire. Public key certs do. Read up on X.509