NOTICE: Rackspace Engineers will be performing a scheduled maintenance on the infrastructure for and on October 23, 2018 and October 24, 2018. During this maintenance, both sites will be down for a few hours between 10:00 PM CDT and 8:00 AM CDT, and customers will not be able to access the How-To or the API documentation. If you have any questions or concerns in regard to this maintenance, please do not hesitate to contact a member of our support team.

Update an existing SSL certificate

  • Last updated on: 2018-07-31
  • Authored by: Chris Farmer

Updating your existing Secure Sockets Layer(SSL) certificate for a Linux® server is a quick process. Whether your SSL certificate is expiring or you simply need to change to a new SSL certificate, follow these instructions to get your SSL updated and installed quickly.

Attention MyRack users: To update the SSL certificates for your environment, follow the instructions in the Reissuing your Rackspace SSL Certificates article posted in the Rackspace Support forum.

Get started

In order to update or renew your SSL certificate, you need your Certificate Signing Request (CSR). If you don’t have your CSR saved, contact support to have a new one generated. You can contact our Fanatical Support® through a ticket, live chat, or a phone call, and we can help you.

Renew your certificate

Next, you need to update or renew your SSL certificate. SSL certificates are available from a number of third party sources.

Follow your vendor’s SSL certificate renewal process. You might need the following details:

  • Server type: For example, Apache 2.4.
  • SSL type: For example, OpenSSL (some vendors label this modSSL).
  • CSR

After you have completed your certificate renewal, you’re ready to install the new certificate.

Install the certificate

In order to install your new SSL certificate, you need the following information:

  • Certificate
  • Private key
  • Intermediate certificate (typically supplied in a separate file from the vendor)

To install the certificate, follow these steps:

  1. Copy your renewed certificate, intermediate certificate bundle, and key file into the directory that you use to hold your certificates.

  2. Open your website configuration file, such as httpd.conf for Apache®, and add or update the following directives:

    • SSLCertificateFile: /path to your issued certificate
    • SSLCertificateKeyFile: /path to your key file
    • SSLCertificateChainFile: /path to your intermediate certificate
  3. Reload or restart your webserver application, such as Apache.

DNS update

Because you are updating an existing SSL certificate, you don’t need to wait for propagation as you would when installing a new SSL certificate.

NOTE: Removing the SSL certificate from your site changes its IP address, which might require a DNS change.

Continue the conversation in the Rackspace Community.