Server upgrade. TLS advice

[jeremypoynton]

Hi,

Been using FileZilla server for a year or so. Set up using IIS, by someone who knew what they were doing.

Server has been fine, but the admin client crashes all the time, so I thought it's time to upgrade.

I've taken note of the Server Administration Interface TLS fingerprint. Post upgrade, the server admin is asking me about the TLS certificate, with the existing one (used since Day 1) is expired.

However, I cannot see where to insert the new one. The various "TLC certificate options" are all gibberish as it were, some asking for stuff I have no idea about, certificates and an associated password

See attachments, and advise me please on how to use the new fingerprint

TLS.JPG (101.12 KiB) Viewed 4858 times

FileZilla.JPG (28.69 KiB) Viewed 4858 times

Thanks

[oibaf]

In Server Configuration -> Administration -> Connection Security you can generate a new self-signed certificate or upload your own.

[jeremypoynton]

OK. Despite the warning, the server is working fine. I'll backup my system then try generating my own. Thanks

[oibaf]

There should should be no need for backup in this case, the new certificate will just be used in place of the old one. The warning is there to push you to update the certificate for security reasons.

[jeremypoynton]

OK

Thanks

[jeremypoynton]

OK. So generated my own. Expires after 5 minutes! What have I done wrong and what do I need to do?

"Distinguished name" I copied from the existing state of play. Didn't know what was wanted there, and that worked.

[oibaf]

Check the year.

[jeremypoynton]

Hah! 'scuse late reply, we are just back from a 248 hour internet outage...

[jeremypoynton]

Still getting.. see attached.

Capture.JPG (21.5 KiB) Viewed 4713 times

[botg]

Have a look at the administration page.

[boco]

There are two certificates, the Administration certificate is separate.

[jeremypoynton]

Clearly! So how do I update that one?

[oibaf]

Clearly! So how do I update that one?

As explained in a earlier response: viewtopic.php?p=185127#p185127

[jeremypoynton]

Worked. But the one I generated before, which WAS 2023-2024 had returned to 2022-2023, hence the message I guess. Only one certificate is shown.

Anyway, seems to be OK now. Thanks