CSS11506: any to renew the CA without inturrupt service?

Answered Question
Jun 24th, 2007
User Badges:

does renew the CA on css11506 with SSl module need inturrupt connection between user and backend server?


Any comments will be apprecaited


Thanks in advance



Correct Answer by skumar1969 about 10 years 1 month ago

The naked truth is that even if it is a v8.10 there is no way you can avoid suspending the ssl-proxy-list for installing renewed ssl certs. Not only that after re-associating the new file, you would need to remove the ssl-server associated with that cert, from the proxy-list and add again before activating.


Try 'sh ssl associate cert' you will know.


thanks

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
julxu Tue, 06/26/2007 - 17:25
User Badges:

to install/renew CA on css11506 became big interruption for our services.


I thought someone told me the higher version will fix this problem, my CSS11506 on version 08.10.2.05. However, I still need suspend the ssl-proxy-list to change ssl association.


Could anyone advice me, if there is a way to install/renew the CA without suspend ssl-proxy-list?


Any comments will be appreciated


Thanks in advance



Correct Answer
skumar1969 Tue, 06/26/2007 - 20:19
User Badges:
  • Bronze, 100 points or more

The naked truth is that even if it is a v8.10 there is no way you can avoid suspending the ssl-proxy-list for installing renewed ssl certs. Not only that after re-associating the new file, you would need to remove the ssl-server associated with that cert, from the proxy-list and add again before activating.


Try 'sh ssl associate cert' you will know.


thanks

Actions

This Discussion