Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been asked to move a rails application from the US to the UK. This involves bringing up the rails stack on Ubuntu 8.04.4; that's completed. I'm stumped with the SSL configuration though. The plan was to bring this server up with the same domain name but temporarily use a subdomain ( instead of during the move and for testing, then rename it to when we're ready for the cutover (does that make sense?). In the meantime, we need a new cert for the app2 subdomain. So to generate a CSR, I need a server key but do I need a new one, or should I copy the one from the existing production server?

share|improve this question
up vote 0 down vote accepted

Personally I'd just copy across the existing certificates and keys. Yes it'll complain whilst you're in testing on the new subdomain, but that'll go away as soon as you change it to the correct name. Mind you I can be pretty lazy, and if you actually need a new ssl certificate for the temporary subdomain then go ahead with new everything - then copy the old one across when it's ready to go live on the current name.

Also, 10.04 is being released next week and is also an LTS version. Don't know what your timeframe on launch is, and I'd probably want 10.04 to be released for a month or two before putting it on a live server, but it's worth considering.

share|improve this answer
we just dealt with the name mismatch for the duration of the testing period. The move went well. – Jeff Paquette May 19 '10 at 17:43

You must generate a certificate with a common name of You need a new CSR for that new certificate.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.