traffic balanced linux boxes need new certificates for apache

RomKnight · 11-17-2004, 08:44 AM

lets see if i can explain.

two linuxes RH 7.3 with a load balancer.
the certificate has expired.

lets assum linux1 and linux2

can i simply generate a new self-signed certificate somewhere on linux1, copy it to same location on linux2 and then edit both httpd.conf to point to the new certificates and restart them?

Or do I have to generate seperate certificates (one in linux1 and other in linux2)?

TIA.

bathory · 11-22-2004, 02:19 AM

I think you should be fine with one certificate (and the respactive key), since only hostname is used during the generation of the certifiacate and I assume you use the same name for both apache servers since you do load balancing.

RomKnight · 11-23-2004, 11:32 PM

that's right.

i generated a certificate on one machine scp .crt and .key files to the other. edited the httpd.conf file to reflect the new certificate/key par and restart the httpd. flawless.

i think some times step by step suck. i almost made this in "one liner" style instead of 5000 steps.