Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

SSL certificate migration from one server to another

What's necessary to migrate valid SSL certificate from one server and service provider to another?

like image 483
Paul Avatar asked Dec 10 '10 15:12

Paul


People also ask

Can you move an SSL certificate to another server?

Yes, you can transfer an SSL certificate you bought elsewhere. If your site is coming from a host that uses cPanel, these can typically be extracted from cPanel directly or from the file manager.

Can I copy certs from one machine to another?

In the MMC Console, in the console tree, expand Certificates (Local Computer) > Personal, and select the Certificates folder. In the center pane, select (highlight) the certificate(s) that you want to move (or copy). Right-click on the highlighted certificate(s) and click Cut (or Copy).

Can I reuse an SSL certificate?

You can reuse SSL certificates, only if the servers have the same computer name. You cannot use the servers at the same time.


2 Answers

In some cases it may be simply a matter of copying the keys to and changing apache configuration on the new server.

For example: http://www.digicert.com/ssl-support/apache-ssl-export.htm

Some certificate authorities may tie an SSL certificate to a specific server.

like image 172
Mark Avatar answered Oct 31 '22 03:10

Mark


Essentially, you export SSL certificates from the server that they are currently installed on, move SSL certificates to the new server, and then import SSL certificates on the new server. But this only really only applies if you are sticking with the same certificate authority ("provider")... which it sounds by your question that you are not.

Keep in mind that even if you stick with the same provider, many require that you purchase a "server license" for each server that you install an SSL certificate to, even if it uses the same private key. And speaking of private keys, it is slightly less secure to copy the SSL certificate and use the same private key on a different server. If an attacker breaks into one server and gets the private key, he will be able to listen in on the connections that other servers are making.

So my advice to you since you want to switch providers is just purchase a new one all together with the new provider once you move to the new server... But maybe I'm misunderstanding your question.

like image 40
prilldev Avatar answered Oct 31 '22 02:10

prilldev