06-24-2007 10:14 PM
does renew the CA on css11506 with SSl module need inturrupt connection between user and backend server?
Any comments will be apprecaited
Thanks in advance
Solved! Go to Solution.
06-26-2007 08:19 PM
The naked truth is that even if it is a v8.10 there is no way you can avoid suspending the ssl-proxy-list for installing renewed ssl certs. Not only that after re-associating the new file, you would need to remove the ssl-server associated with that cert, from the proxy-list and add again before activating.
Try 'sh ssl associate cert' you will know.
thanks
06-26-2007 05:25 PM
to install/renew CA on css11506 became big interruption for our services.
I thought someone told me the higher version will fix this problem, my CSS11506 on version 08.10.2.05. However, I still need suspend the ssl-proxy-list to change ssl association.
Could anyone advice me, if there is a way to install/renew the CA without suspend ssl-proxy-list?
Any comments will be appreciated
Thanks in advance
06-26-2007 08:19 PM
The naked truth is that even if it is a v8.10 there is no way you can avoid suspending the ssl-proxy-list for installing renewed ssl certs. Not only that after re-associating the new file, you would need to remove the ssl-server associated with that cert, from the proxy-list and add again before activating.
Try 'sh ssl associate cert' you will know.
thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide