How do I update or renew a self-signed certificate?

To update, generate a new certificate using OpenSSL or a similar tool. The key must be the same if you wish to avoid disruption of current trusted entities. To renew, simply recreate it with a longer validity period. You'll need to redeploy the new certificate and key to the server and possibly re-import it into trusted stores on client machines.