Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

I am using Centos 6.5, Apache 2.2.15 with SSL. Due to heartbleed I have updated openssl to release 16.el6_5.7 and I have restarted the httpd service. I am using default Apache certificate and key:



So my question is: after updating openssl should I create new pair of certificate and key or is it safe to use default?

Thank you.

share|improve this question

marked as duplicate by MadHatter, Sven, Ward, Jenny D, HopelessN00b May 5 '14 at 11:44

This question was marked as an exact duplicate of an existing question.

up vote 0 down vote accepted

Replace the certs and keys which were made with the old openssl version as soon as possible. And read the thread mentioned by MadHatter

share|improve this answer
Ok, thank you. For now it is not production server. I have it for my personal usage. I read the thread mentioned by MadHatter. – teo May 4 '14 at 9:01

Not the answer you're looking for? Browse other questions tagged or ask your own question.