How to generate new certificate?

[Simon W]

Now that 380.66 onwards generates more complete certificates, how to I get it to regenerate?

More precisely: how do I remove the current (inferior) one so as to trigger the auto-generation?

Thanks.

 

[RMerlin]

Now that 380.66 onwards generates more complete certificates, how to I get it to regenerate?

More precisely: how do I remove the current (inferior) one so as to trigger the auto-generation?

Thanks.

Unless you changed the default behaviour, just reboot. It's generated at boot time.

 

[amigohd]

what if I changed the default behaviour long time ago, so the cert isn't generated every reboot? how do I go back? it's way too long back, I don't remember.

 

[RMerlin]

Not 100% sure because I never really studied that part of the code, but my guess would be:

nvram set https_crt_save=0
nvram commit
reboot

 

[john9527]

what if I changed the default behaviour long time ago, so the cert isn't generated every reboot? how do I go back? it's way too long back, I don't remember.

Here's the method I recommended for my fork...I think it should be the same for the latest Merlin

The fastest way to generate a new certificate for import to your browser is via telnet/ssh.

nvram set https_crt_gen=1
nvram set https_crt_save=1
nvram commit
service restart_httpd

Close the current router window, and reconnect via https://192.168.1.1:8443 (or the url using your own router address and https port number). The browser will complain about an insecure connection due to a self-signed certificate. Use the procedure specific to your browser to accept the certificate and add it to the certificate store.