Openssl on Support Toolshttps://support.tools/categories/openssl/Recent content in Openssl on Support ToolsHugoen-USThu, 21 Oct 2021 00:04:00 +0000How to generate expired SSL certificates using OpenSSL and Faketimehttps://support.tools/post/how-to-generate-expired-ssl-certificates/Thu, 21 Oct 2021 00:04:00 +0000https://support.tools/post/how-to-generate-expired-ssl-certificates/<p>While playing with SSL certificates and Kubernetes, I wanted to see how Kubernetes respond when its certificates have expired. Since Rancher/RKE uses self-signed certificates, I was able to play with different configurations. The lowest duration of validity we can give to the certificate is one day. I&rsquo;m not patient enough to wait for a day to let the certificate expire. So I wanted to find a way to generate certificates that are expired at the time of generation itself.</p>