Shibboleth IDP ssl certificate not allowing to me to rotate to a new ssl cert

[Ewing, Bill]

Howdy,

I am currently trying to update a soon to be expiring SSL certificate on my shibboleth idp. I had a test run on my production clone using the new .pfx certificate and it loaded fine after a service restart. But on my production server after modifying the "C:\Program Files (x86)\Shibboleth\IdP\jetty-base\start.d\idp.ini"

jetty.sslContext.keyStorePath=C:/Program Files (x86)/Shibboleth/IdP/credentials/newcert2022.pfx and corresponding keystore password with the updated pw after a service restart the IDP keeps using the old ssl certificate.
jetty.sslContext.keyStorePassword=password
jetty.sslContext.keyStoreType=PKCS12

I still see in the "jetty.log" file that jetty is still pulling the old cert file somehow. Looking for any ideas that may help kick jetty off of using that old certificate.

Thanks in advance.

Bill

William Ewing, Senior Information Security Analyst
CISSP, MCSE, MCITP-EA, CCNA/CCDA
UT System - Office of Technology and Information Services
210 West 6th Street
Austin, Texas 78701-3035
Phone: (512)499-4575
email: bewing at utsystem.edu<mailto:bewing at utsystem.edu>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220528/3acb5e49/attachment.htm>