views:

324

answers:

2

HI, When i renew an SSL certificate will the public key change or be the same as the expired certificate?

+2  A: 

If you re-use the same certificate request, the key will not change. If you generate a new request, that'll generate a new key.

If your certificate authority is not requiring a certificate request, then they must be re-using the old one.

derobert
HI,We are running a webservice that has ssl. It was running without any probs. After the expiry date we renewed the certiicate with a new CSR. Since then the webservice is not working. It shows up some errors like "Could not establish secure channel SSL/TLS"
rahul
Can we use the old CSR to renew a certificate or is it necessary to have a new CSR for certificate.
rahul
Unless the CA objects, you can use the old one. I'm not sure *why* you'd want to, but you can.
derobert
Sorry, Actually I do not hane mush knowledge about certificates and SSL. But we are facing this sort of problem. I heard that we have to use a new CSR for renewing a certificate also. So will it cause any problem when the client tries o connect to our webservice
rahul
As long as you properly install the new key and certificate, your clients should not care. Unless you have some weird clients.
derobert
Can you tell me what all things has to be done when renewing an expired certificate
rahul
Also, since you're apparently responsible for maintaining this, you really should take some time to learn the basics of how it works.
derobert
What exactly you have to do depends on the server — its documentation should tell you. And this is going /far/ off-topic here.
derobert
+1  A: 

The certificate has nothing to do with the keys. Essentially the certificate is just a signature of your public key. You continue to reuse the same key (unless your old public key has an expiry date that's passed).

Adam Hawes
HI,We are running a webservice that has ssl. It was running without any probs. After the expiry date we renewed the certiicate with a new CSR. Since then the webservice is not working. It shows up some errors like "Could not establish secure channel SSL/TLS"
rahul
You probably didn't install the new private key. Is this really a programming question?
derobert
No, this has nothing to do with programming.
rahul