Renewing certificates on windows installation

[Morris, Andi]

Initially both, but I've worked out now that my external facing certificate is separate, and as such have renewed this successfully. I have generated the internal SAML certificate, replaced the existing private key and public crt files with the new ones (exactly the same file names and locations) and restarted both apache and tomcat services.

I then remembered that I need to put the contents of the crt file inside my idp-metadata.xml file and replace this on any relevant SPs. After doing this I everything seems to be ok.

I am interested in the what has been said since I've been typing this though. Are you saying that the internal shibboleth certificate does not necessarily affect the service if it has expired? The person that setup Shibboleth at this site has since left, and he set this up with public certs, rather than the auto-generated self-signed certificates that last 20 years (according to the docs).

Cheers,
Andi

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: 01 March 2013 14:54
To: Shib Users
Subject: Re: Renewing certificates on windows installation

Andi, are you talking about your user facing SSL certificate, which has nothing to do with Shibboleth operationally, or your SAML signing or SOAP certificate, which does?

-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
________________________________

From 1st November 2011 UWIC changed its title to Cardiff Metropolitan University. From the 6th December 2011, as part of this change, all email addresses which included @uwic.ac.uk have changed to @cardiffmet.ac.uk. All emails sent from Cardiff Metropolitan University will now be sent from the new @cardiffmet.ac.uk address. Please could you ensure that all of your contact records and databases are updated to reflect this change. Further information can be found on the website here.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>

Ar Dachwedd y 1af 2011 newidiodd UWIC ei henw i Brifysgol Fetropolitan Caerdydd. O Ragfyr 6ed, fel rhan o'r newid yma, bydd pob cyfeiriad e-bost sy'n cynnwys @uwic.ac.uk yn newid i @cardiffmet.ac.uk. Bydd yr holl ebyst a ddanfonir o Brifysgol Fetropolitan Caerdydd yn cael eu danfon o‘r cyfeiriad @cardiffmet.ac.uk newydd. Gwnewch yn siwr eich bod yn diweddaru eich cofnodion cyswllt a'ch cronfeydd data i adlewyrchu hyn. Gellir cael rhagor o wybodaeth ar y wefan yma.<http://www3.uwic.ac.uk/English/News/Pages/UWIC-Name-Change.aspx>