-2

I am using Centos 6.5, Apache 2.2.15 with SSL. Due to heartbleed I have updated openssl to release 16.el6_5.7 and I have restarted the httpd service. I am using default Apache certificate and key:

*/etc/pki/tls/certs/localhost.crt

/etc/pki/tls/private/localhost.key*

So my question is: after updating openssl should I create new pair of certificate and key or is it safe to use default?

Thank you.

0

Replace the certs and keys which were made with the old openssl version as soon as possible. And read the thread mentioned by MadHatter

  • Ok, thank you. For now it is not production server. I have it for my personal usage. I read the thread mentioned by MadHatter. – teo May 4 '14 at 9:01

Not the answer you're looking for? Browse other questions tagged or ask your own question.