Originally Posted by
Pascone10
Orion- I got this from Ubiquiti- This is to change how long the certificate is good for. By default its only one year ( i am sure you know all that but here is how they recommended changing it)
Hi Brett,
Here are the steps performed on remote,
- Reset the router as the older certs were creating issues
- To increase the certificate validity, edited the conf files
To extend the validity of the Server/Client Certificates: edit the openssl.cnf file. It is located at /usr/lib/ssl
Set the default_days to 3650
To extend the validity of the CA (Certificate of Authentication): edit the CA.sh file. It is located at /usr/lib/ssl/misc,
Set CADAYS="-days 3650" # 10 years
In the vi command: press "i" to start editing. Once done, press ESC a couple of time to ensure the bottom-left-pannel showing "-". Then if save and quit, type ":wq" (no quote). If not save and quit, type :q
- Ran the config commands as described in the KB and removed passkey from the server.key file
- Reboot the router, the config persisted
Hope that's helpful. If you have any other questions, please let us know!