topic Re: https on pix and asa - cert expired in Network Security https://community.cisco.com/t5/network-security/https-on-pix-and-asa-cert-expired/m-p/1531678#M603527 <HTML><HEAD></HEAD><BODY><P>Oliver,</P><P></P><P>7.0.5 is ancient <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P></P><P>I believe the exact check that is done is if certificate exists.</P><P></P><P>care to share your "show run crypto ca trust" "show cry ca cert" outputs?</P><P></P><P>Marcin</P></BODY></HTML> Tue, 14 Sep 2010 16:26:00 GMT Marcin Latosiewicz 2010-09-14T16:26:00Z https on pix and asa - cert expired https://community.cisco.com/t5/network-security/https-on-pix-and-asa-cert-expired/m-p/1531677#M603524 <P>The https certificate of one of our pix firewalls has expired, so I wondered how to refresh it.</P><P></P><P>I tried everything from generating new key pairs to zeroizing every key I could grab and generate new ones, disabling and enabling the http server in between, so in theory it should start with a new cert.</P><P></P><P>however, deleting installed certs and clearing the cache of the browser didn´t help much, all the client sees is the expired cert, which I suspect to be the cert the pix is still delivering.</P><P></P><P></P><P>can someone share some light on how the https demon is actually related to the key pairs and what you need to do in order to refresh an expired cert on a pix 7.05 ?</P><P></P><P></P><P>tia,</P><P></P><P>oliver</P> Mon, 11 Mar 2019 18:40:08 GMT https://community.cisco.com/t5/network-security/https-on-pix-and-asa-cert-expired/m-p/1531677#M603524 keller.oliver 2019-03-11T18:40:08Z Re: https on pix and asa - cert expired https://community.cisco.com/t5/network-security/https-on-pix-and-asa-cert-expired/m-p/1531678#M603527 <HTML><HEAD></HEAD><BODY><P>Oliver,</P><P></P><P>7.0.5 is ancient <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P><P></P><P>I believe the exact check that is done is if certificate exists.</P><P></P><P>care to share your "show run crypto ca trust" "show cry ca cert" outputs?</P><P></P><P>Marcin</P></BODY></HTML> Tue, 14 Sep 2010 16:26:00 GMT https://community.cisco.com/t5/network-security/https-on-pix-and-asa-cert-expired/m-p/1531678#M603527 Marcin Latosiewicz 2010-09-14T16:26:00Z