This is probably a captain noobenstein question but I cannot figure out how to google this issue for an answer.

I've just upgraded from Apache 2.4.10 w/ OpenSSL 1.0.1j to Apache 2.4.18 w/ OpenSSL 1.0.2e

Do I need to regenerate my SSL files and get re-validated with my certificate authority?

If not, then why?


My previous .key and .csr files were created like this:

openssl.exe genrsa -out {The_FQDN}.key 2048
openssl.exe req -new -sha256 -key {The_FQDN}.key -out {The_FQDN}.csr
  • No, because your existing certificate has not expired. Jan 15 '16 at 21:27

The certificate validation process contains four basic steps.

  1. Generate a request
  2. Generate a key (the .key file in your apache config)
  3. Submit the request to a CA for validation
  4. Receive a certificate (the .cer or .crt in your apache config)

Since these steps are time sensitive - the request which was submitted is still the request which was validated - there is no reason to go through the validation process again.

In other words your certificate / key binding is already made and there is no reason to revise it. This does assume that you still have the same certificate and key as previously used.

  • Thanks! Yes I do have the same certificate and key. I guess my main concern was whether or not the newer OpenSSL does anything different when creating the .key and .csr file which could cause incompatibilities; assuming I use the same parameters as before.
    – MonkeyZeus
    Jan 15 '16 at 22:10
  • If you would like, you can check out my edit to see the exact command I used during my Apache 2.4.10 install.
    – MonkeyZeus
    Jan 15 '16 at 22:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.