--- rpms/e-smith-base/sme10/e-smith-base.spec	2021/04/22 02:10:19	1.115
+++ rpms/e-smith-base/sme10/e-smith-base.spec	2021/06/01 22:04:44	1.116
@@ -1,10 +1,10 @@
-# $Id: e-smith-base.spec,v 1.114 2021/04/09 02:54:25 jpp Exp $
+# $Id: e-smith-base.spec,v 1.115 2021/04/22 02:10:19 jpp Exp $
 
 Summary: e-smith server and gateway - base module
 %define name e-smith-base
 Name: %{name}
 %define version 5.8.0
-%define release 95
+%define release 96
 Version: %{version}
 Release: %{release}%{?dist}
 License: GPL
@@ -80,6 +80,7 @@ Patch66: e-smith-base-5.8.0-bz10657-dhcp
 Patch67: e-smith-base-5.8.0-bz11508-remove-templates-custom-ownedbyrpm.patch
 Patch68: e-smith-base-5.8.0-bz11537.patch
 Patch69: e-smith-base-5.8.0-bz11569.patch
+Patch70: e-smith-base-5.8.0-bz11552-renewkey.patch
 
 BuildRoot: /var/tmp/%{name}-%{version}-%{release}-buildroot
 Requires: pwauth
@@ -228,6 +229,7 @@ rm -rf root/etc/rc.d/init.d/supervise
 %patch67 -p1
 %patch68 -p1
 %patch69 -p1
+%patch70 -p1
 
 %build
 
@@ -333,6 +335,13 @@ fi
 
 
 %changelog
+* Tue Jun 01 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.8.0-96.sme
+- always renew self signed certificate [SME: 11552]
+  update key / crt if not signed with the right key size
+  default to self signed if custom cert and key are not files or not rigth type
+  add perl module to help handle certificates and keys
+  TODO: check if both key and cert are related, if not default to self signed
+
 * Wed Apr 21 2021 Jean-Philippe Pialasse <tests@pialasse.com> 5.8.0-95.sme
 - fix openssl.conf not generated when openldap field are empty [SME: 11569]