Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Tell me please what will happen if my ssl CA server is decommissioned and I am using certificates signed by this CA to establish connection between internal Apaches and reverse proxies Apaches?

SSLVerifyClient properties in Apaches are set to default.

share|improve this question

Do you have CRL checking enabled on any of those systems?

If you don't have CRL checking enabled, then removing the CA shouldn't really mean much. You would still need the CA cert to validate the per-server certificates.

The certificates will eventually expire, and you will need to issue new certificates, or reconfigure your system.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.