Net2 API Certificate

[robjduk]

Good morning,

 Can anyone help me with the Net2 certificate? I had the "API TLS Certificate will expire in X" appear a while back so followed the instructions, downloaded and installed the self signed certificate, restarted the service and went on my way, assuming the new cert would take hold when the old one expired. Now I get the message its expired.

 

This does not seem to be causing any operational problems (Locker is working) but I want the warning message to go away. 

 

What am I not doing correctly?

 

Thank you

[robjduk]

plot twist... the self signed certificate from the Net2 API setup expires today! Thats where the problem is. Now if anyone knows how to generate a new one for a year, please do shout.

 

Edit: I went through the rabbit hole of self created certificates and the pain in the a*** of extracting keys using OpenSSL however, I'd be interested to hear why Net2 didn't create a certificate valid for a year if anyone knows why.

Edited February 5 by robjduk

[mukz]

On 05/02/2026 at 10:08, robjduk said:

plot twist... the self signed certificate from the Net2 API setup expires today! Thats where the problem is. Now if anyone knows how to generate a new one for a year, please do shout.

 

Edit: I went through the rabbit hole of self created certificates and the pain in the a*** of extracting keys using OpenSSL however, I'd be interested to hear why Net2 didn't create a certificate valid for a year if anyone knows why.

have you managed to fix this?

[robjduk]

Yes and no.

 

I had to make my own certificate however I am rubbish at them. It took me (and Gemini) some time to not only make it but to use OpenSSL software to extract the key too.

 

It worked but....

 

Fast forward to last Friday when I realised Locker was not talking to Net2 because of the cert. After alot of swearing, my excellent tech took the project on and managed to produce an inhouse SSL to match the old details, fixing my issue so I guess I'm saying to proceed with caution.

 

If you really need, Id be happy to send you the instructions I wrote myself. Just PM me.

[tdk1069]

ours expired a while ago, i only use the api to pull events into graylog for dashboards and the like. But for us we were able to just hit "regenerate" and restart api in the actual configuration utility itself