Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Dec 15, 2011

Managing SSL Certificate Bundles

We are about changing SSL vendors, and it appears their root is already in the build-in "ca-bundle". However, their intermediates are not. I wanted to get some feedback on the right way to manage thes...
config
design
hooleylist's avatar
hooleylist
Icon for Cirrostratus rankCirrostratus
Dec 19, 2011
Hi SMP,

 

 

I think that's about right. One thing to be aware of is that if you've already completed the SSL handshake, the browser and TMM will store the session ID in their cache and reuse it. So it's possible that after you changed your cert settings on the client and/or server, your browser would have resumed an existing session and you wouldn't see the expected failure. To avoid this scenario, you can clear the client SSL cache and/or TMM's cache. It's less impacting to do this on the client than TMM.

 

 

Aaron