Apache

rajaniyer123 · 06-03-2012, 10:46 AM

Hi,

As part of SSL certificate expiry I have to replace the same with new one.

In the same ref. I have generated new csr key file.

In the same ref. please let me know whether after taking the proper backup of the old .crt & .key file and replacing the same with new one in below path, do I need to bounce the apache or just graceful option will enough.

SSLCertificateFile /usr/local/apache2/conf/ssl.crt/abc.crt
SSLCertificateKeyFile /usr/local/apache2/conf/ssl.key/abc.key

Please suggest.

Thanks
Raj

tshikose · 06-12-2012, 04:18 AM

Hi,

Assuming you are on RHEL, CentOS, Fedora, SL or similar, just do

Code:

service httpd reload

It will load the new configuration (so the new SSL keys) and apply it for the new connections (on ward) while still serving the old and existing connections with the old configuration.

Or launch the below on off peak hours.

Code:

service httpd restart