-1

I am using Centos 6.5, Apache 2.2.15 with SSL. Due to heartbleed I have updated openssl to release 16.el6_5.7 and I have restarted the httpd service. I am using default Apache certificate and key:

*/etc/pki/tls/certs/localhost.crt

/etc/pki/tls/private/localhost.key*

So my question is: after updating openssl should I create new pair of certificate and key or is it safe to use default?

Thank you.

teo
  • 143

1 Answers1

0

Replace the certs and keys which were made with the old openssl version as soon as possible. And read the thread mentioned by MadHatter

Community
  • 1
b13n1u
  • 979