Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Users might experience few discrepancies in Search results. We are working on this on our side. We apologize for the inconvenience it may have caused.
New Member

CSS11506: any to renew the CA without inturrupt service?

does renew the CA on css11506 with SSl module need inturrupt connection between user and backend server?

Any comments will be apprecaited

Thanks in advance

1 ACCEPTED SOLUTION

Accepted Solutions
Bronze

Re: CSS11506: any to renew the CA without inturrupt service?

The naked truth is that even if it is a v8.10 there is no way you can avoid suspending the ssl-proxy-list for installing renewed ssl certs. Not only that after re-associating the new file, you would need to remove the ssl-server associated with that cert, from the proxy-list and add again before activating.

Try 'sh ssl associate cert' you will know.

thanks

2 REPLIES
New Member

Re: CSS11506: any to renew the CA without inturrupt service?

to install/renew CA on css11506 became big interruption for our services.

I thought someone told me the higher version will fix this problem, my CSS11506 on version 08.10.2.05. However, I still need suspend the ssl-proxy-list to change ssl association.

Could anyone advice me, if there is a way to install/renew the CA without suspend ssl-proxy-list?

Any comments will be appreciated

Thanks in advance

Bronze

Re: CSS11506: any to renew the CA without inturrupt service?

The naked truth is that even if it is a v8.10 there is no way you can avoid suspending the ssl-proxy-list for installing renewed ssl certs. Not only that after re-associating the new file, you would need to remove the ssl-server associated with that cert, from the proxy-list and add again before activating.

Try 'sh ssl associate cert' you will know.

thanks

119
Views
0
Helpful
2
Replies
CreatePlease to create content