Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Tell me please what will happen if my ssl CA server is decommissioned and I am using certificates signed by this CA to establish connection between internal Apaches and reverse proxies Apaches?

SSLVerifyClient properties in Apaches are set to default.

share|improve this question
add comment

1 Answer 1

Do you have CRL checking enabled on any of those systems?

If you don't have CRL checking enabled, then removing the CA shouldn't really mean much. You would still need the CA cert to validate the per-server certificates.

The certificates will eventually expire, and you will need to issue new certificates, or reconfigure your system.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.