Certificate renewal about certidude HOT 3 CLOSED

Similarily to Lets Encrypt we could drastically shorten the lifetime of the certificates if there is another kind of trust set up, eg AD membership which would permit regular automatic renewal eg renew when certificate is older than 2 weeks (or however long the employees plan to have a vacation).

from certidude.

As described on the link below we can use key corresponding to currently valid certificate to sign a new signing request.

http://stackoverflow.com/questions/10782826/digital-signature-for-a-file-using-openssl

The signature can be supplied with HTTP headers, see link below.

Signature: keyId="Test",algorithm="rsa-sha256",
headers="(request-target) host date content-type digest content-length",
signature="jgSqYK0yKclIHfF9zdApVEbDp5eqj8C4i4X76pE+XHoxugXv7q
nVrGR+30bmBgtpR39I4utq17s9ghz/2QFVxlnToYAvbSVZJ9ulLd1HQBugO0j
Oyn9sXOtcN7uNHBjqNCqUsnt0sw/cJA6B6nJZpyNqNyAXKdxZZItOuhIs78w="

https://tools.ietf.org/html/draft-cavage-http-signatures-03

from certidude.

Implemented with 06010ce

from certidude.