CSS11506: any to renew the CA without inturrupt service?

Answered Question
Jun 24th, 2007
User Badges:

does renew the CA on css11506 with SSl module need inturrupt connection between user and backend server?


Any comments will be apprecaited


Thanks in advance



Correct Answer by skumar1969 about 9 years 9 months ago

The naked truth is that even if it is a v8.10 there is no way you can avoid suspending the ssl-proxy-list for installing renewed ssl certs. Not only that after re-associating the new file, you would need to remove the ssl-server associated with that cert, from the proxy-list and add again before activating.


Try 'sh ssl associate cert' you will know.


thanks

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
julxu Tue, 06/26/2007 - 17:25
User Badges:

to install/renew CA on css11506 became big interruption for our services.


I thought someone told me the higher version will fix this problem, my CSS11506 on version 08.10.2.05. However, I still need suspend the ssl-proxy-list to change ssl association.


Could anyone advice me, if there is a way to install/renew the CA without suspend ssl-proxy-list?


Any comments will be appreciated


Thanks in advance



Correct Answer
skumar1969 Tue, 06/26/2007 - 20:19
User Badges:
  • Bronze, 100 points or more

The naked truth is that even if it is a v8.10 there is no way you can avoid suspending the ssl-proxy-list for installing renewed ssl certs. Not only that after re-associating the new file, you would need to remove the ssl-server associated with that cert, from the proxy-list and add again before activating.


Try 'sh ssl associate cert' you will know.


thanks

Actions

This Discussion