on Apache (and possibly postfix)?
I went through this two years ago, but now I can't remember.
Our mailserver cert just expired, so I renewed it with the CSR that I used last time. The CA recognized this was a renewal, and everything went very smoothly to get an updated certificate. I replaced the one in Postfix, and that seemed to go ok (though for some reason Outlook complained about the certificate initially, but Thunderbird didn't).
When I replaced the certificate in Apache, it still says that it has the expired cert. The two SSL lines in httpd.conf are point to the right .crt and .key files.
My questions:
- do I need, somehow, to regenerate the key?
- do I need, somehow to import the certificate in a different way that just restarting Apache pointing to the new .crt file?
- is there something else that I'm missing?
- how can I see the certs in Thunderbird? (I looked at the "Your certificates" list, and it's empty.)
Thanks,
KS |