| Author |
moving certificate?
|
|
| dubing@gmail.com 2005-07-20, 5:50 pm |
| We need to move a site from host A to host B and take host A our of
service after the move. Then change the name of host B to that of host
A. I'm just wondering if I can just move the certificates and keys
generated on host A to host B and they can be used right away on B?
Anything else need to be done on host B before the old certificate and
keys can take effect?
Thanks in advance,
Bing
| |
| Jim Hayter 2005-07-20, 5:50 pm |
| On 20 Jul 2005 08:14:35 -0700, in comp.infosystems.www.servers.unix,
dubing@gmail.com wrote:
>We need to move a site from host A to host B and take host A our of
>service after the move. Then change the name of host B to that of host
>A. I'm just wondering if I can just move the certificates and keys
>generated on host A to host B and they can be used right away on B?
>Anything else need to be done on host B before the old certificate and
>keys can take effect?
Since you didn't specify your platform or server software, I can't be
sure about your situation.
I'm assuming that by host A and host B you mean two distinct physical
server boxes.
I run several web server systems behind a load balancer. I place the
certificate and key files on each server and use the same apache
config files on each server. It works fine.
If the files couldn't be copied, they'd have to be purchased anew for
each additional server or server replacement. I don't think that
would go over well.
Jim
| |
| Jorey Bump 2005-07-21, 5:52 pm |
| dubing@gmail.com wrote in news:1121872475.788631.174510
@g49g2000cwa.googlegroups.com:
> We need to move a site from host A to host B and take host A our of
> service after the move. Then change the name of host B to that of host
> A. I'm just wondering if I can just move the certificates and keys
> generated on host A to host B and they can be used right away on B?
> Anything else need to be done on host B before the old certificate and
> keys can take effect?
Copies of the key and certificates can be distributed to any machine that
responds to the hostname specified as the Common Name in the certificate.
If clients are directed by DNS to either machine, they will happily accept
the certificate.
| |
| dubing@gmail.com 2005-07-22, 5:50 pm |
| Yeah, forgot to mention these two hosts are both linux and have almost
the same hardware structure.
Bing
|
|
|
|