Expiring SSL certificate.

[jorban]

Is it necessary to renew an expiring self-signed SSL certificate?

Everybody gets a message at first logon that the cert isn’t trusted so they add it to their keychain. But when the cert expires, does stuff just stop working?

From what I can read, there seems to be no easy way to renew a certificate. You have to create a new one and delete the old one.

I’m assuming that everyone is going to get asked again if they want to trust the new certificate, so unless everything stops working, why go through all that hassle?

Thanks,
John

PS: Should have read further in the documentation. It appears that the expiring certificate must be replaced. I’m thinking that the NAME of the new certificate must be identical to the expiring certificate? (Otherwise all the references to that older certificate will need to be updated?)

[Author]

Posts