Generate new certificates or renew old ones

[eum602]

It would be useful if a user had a way to generate new certificates o renew old ones when those are expired.

As a workaround, the following steps can be followed:

1. Login with sudo:

sudo -i

2. move the orion certificates folder to some other location for example:

mv /root/lacchain/orion/certificates/  ~

3. run the ansible installer in order to update the writer node - please replace the private key and remote user with your right credentials, an also take into consideration the orion and besu versions you are using in your private business orion network and also the besu version configured in the inventory file (located in your local repository)

ansible-playbook -i inventory --private-key=~/.ssh/id_ecdsa -u remote_user site-lacchain-update-writer.yml 

After finishing the installing process, a new certificate folder is created into /root/lacchain/orion

4. Now execute the following:

cp -r ~/certificates/CAs/* /root/lacchain/orion/certificates/CAs/

5. Restart your Orion node with:

systemctl restart orion

6. Verify all is running correctly with

systemctl status orion