Forum Discussion
Coredump66_1745
Nimbostratus
NimbostratusSSL Certificate Renewal
Does anyone know if down time is required when renewing the SSL Certificate on the LTM?
Hamish
Cirrocumulus
CirrocumulusYeah, that's just to create a new CSR for the existing keypair.
Personally I never use it. generating a new keypair is a good way to ensure that your keys are harder to compromise via old hardware (e.g. The HD's and tapes where you store your backups), plus your older keys would probably be of a shorter length. 2048 should be the minimum nowadays... IIRC 1024 was very close to being broken last time I looked.
