Refusing to overwrite

[cavaughankirov]

My ca.crt has expired. So going to docs about rotating the cert only results in the following error:
Refusing to overwrite existing CA key: ca.key
BTW, made sure nebula-start.service is not running. Tried moving ca.key out of the /etc/nebula/ dir, but then it complained about overwriting the ca.crt file. Any help appreciated!

[virtadpt]

@cavaughankirov That's a bit of a misfeature in Nebula. What I usually do is shut Nebula down, create a subdirectory with today's date, and move the certs into it to archive them. Then I cut new ones normally, and restart the service.