LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 04-13-2011, 02:36 PM   #1
bkcreddy17
Member
 
Registered: Feb 2008
Location: India-Hyderabad
Distribution: RHEL and Fedora
Posts: 171

Rep: Reputation: 15
Issues with expired SSL certificates


Hi All,

I came across few web servers still using expired certificates. Could some guys let me know and provide me some links, what are the issues we will face If we continue using these expired SSL certificates?
 
Old 04-13-2011, 03:01 PM   #2
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora, FreeBSD
Posts: 3,925
Blog Entries: 5

Rep: Reputation: Disabled
Primary issue: customers likely won't (and shouldn't) trust the expired certs' authenticity.
 
Old 04-13-2011, 03:05 PM   #3
bkcreddy17
Member
 
Registered: Feb 2008
Location: India-Hyderabad
Distribution: RHEL and Fedora
Posts: 171

Original Poster
Rep: Reputation: 15
Will the encryption takes place? And any more issues?
 
Old 04-13-2011, 03:13 PM   #4
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora, FreeBSD
Posts: 3,925
Blog Entries: 5

Rep: Reputation: Disabled
Yes, unless you've somehow borked your configuration (or compromised your private key), encryption will continue to take place reliably.

But you're ignoring one of the important (theoretical) goals of SSL - authentication, as in "So-and-so, who you trust, says I am who I say I am. So we're good to talk."

It's not a good idea to get your customers into the habit of clicking through frightening web browser warnings. If you're not going to fork over the cash to renew your certs, then consider securely setting up an in-house CA, and distributing your root cert to customers. (Well beyond the scope of this thread.)

On the other hand, if you have 'net facing websites with unknown numbers of customers - established and new - then you're ignoring expired certs at your own peril ($$).
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Expired Server Certificates carlosinfl Linux - Server 4 03-19-2008 06:18 AM
SSL Certificates ashiers Linux - Security 2 06-30-2006 08:39 AM
https SSL Certificate Expired lothario Linux - Security 1 01-19-2005 09:42 PM
SSL certificates the-chains Linux - Software 0 11-15-2004 07:12 PM
ssl certificates champ Linux - Security 2 04-05-2003 09:47 AM


All times are GMT -5. The time now is 08:54 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration