Skip to content

Hotfix renew-cert CN certificates

HgO requested to merge hotfix-renew-cert-cn-certificates into stable

Closes #20 (closed)

Testing

Upgrade

sudo yunohost app upgrade neutrinet -u https://git.domainepublic.net/Neutrinet/neutrinet_ynh/tree/hotfix-renew-cert-cn-certificates --debug

Install

sudo yunohost app install https://git.domainepublic.net/Neutrinet/neutrinet_ynh/tree/hotfix-renew-cert-cn-certificates --debug

Tests

These tests must be run for both upgrade and install.

First run:

/opt/neutrinet/renew_cert/renew_cert_cron.sh

This should NOT renew the certificate. However you should get some output saying how many days remain before renewal.

Then, to force the renewal:

/opt/neutrinet/renew_cert/renew_cert_cron.sh -f

(Optionally) Check that the quiet mode is working:

/opt/neutrinet/renew_cert/renew_cert_cron.sh -q -f

After each run of the script, check that you have an ip under tun0 interface:

ip a show dev tun0

In particular, you should have an IPv4 address.

Check also the certificate's creation date:

openssl x509 -in /etc/openvpn/keys/user.crt -noout -startdate
Edited by HgO

Merge request reports