Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

This question already has an answer here:

I am using Centos 6.5, Apache 2.2.15 with SSL. Due to heartbleed I have updated openssl to release 16.el6_5.7 and I have restarted the httpd service. I am using default Apache certificate and key:

*/etc/pki/tls/certs/localhost.crt

/etc/pki/tls/private/localhost.key*

So my question is: after updating openssl should I create new pair of certificate and key or is it safe to use default?

Thank you.

share|improve this question

marked as duplicate by MadHatter, Sven, Ward, Jenny D, HopelessN00b May 5 at 11:44

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

up vote 0 down vote accepted

Replace the certs and keys which were made with the old openssl version as soon as possible. And read the thread mentioned by MadHatter

share|improve this answer
    
Ok, thank you. For now it is not production server. I have it for my personal usage. I read the thread mentioned by MadHatter. –  teo May 4 at 9:01

Not the answer you're looking for? Browse other questions tagged or ask your own question.