Root authority certificate renewal

[wessberg]

Hey there. The root certificate that devcert has generated and installed appears to have a lifetime of one month as seen in the image above. Am I missing something, or shouldn't there be a process for automatic renewal of the root certificate?

I'm on MacOS High Sierra and solved it by removing private-key.key and certificate.cert inside ~/Library/Application Support/devcert/certificate-authority, then removing all domains from the index.txt inside the same folder as well as all domains within ~/Library/Application Support/devcert/domains to force devcert into generating and signing new certificates.

[jeffwillette]

I just ran into this issue too. I thought I could just delete the certs and the ~/Library/Application Support/devcert dir and start again but I got errors after deleting that and trying to run devcert. Is there a recommended way to renew?

I seem to remember that the old version of devcert that installed to .config gave a reallllly long validity certificate, but this one is only one month. Why the change?

[dcflow]

On Windows check out this post to delete the devcert from the Trusted Root Certification Authorities then open ${User}\AppData\Local\devcert and delete everything inside certificate-authority.

[dmail]

To me this issue is resolved by #24. There is no strategy about root certificate expiring after 7000 days but that's less important than when they expired after 1 month :)