I am using Centos 6.5, Apache 2.2.15 with SSL. Due to heartbleed I have updated openssl to release 16.el6_5.7 and I have restarted the httpd service. I am using default Apache certificate and key:



So my question is: after updating openssl should I create new pair of certificate and key or is it safe to use default?

Thank you.


Replace the certs and keys which were made with the old openssl version as soon as possible. And read the thread mentioned by MadHatter

  • Ok, thank you. For now it is not production server. I have it for my personal usage. I read the thread mentioned by MadHatter. – teo May 4 '14 at 9:01

Not the answer you're looking for? Browse other questions tagged or ask your own question.