-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Jasper,

On 8/23/13 1:06 AM, Jasper Lai wrote:
> Sorry I am a beginner about ssl cert.
> 
> according to
> 
> 
> http://tomcat.apache.org/tomcat-7.0-doc/ssl-howto.html#Create_a_local_Certificate_Signing_Request_(CSR)
>
>  it will gen a keystore and CSR.
> 
> we generate the CSR and send to Certificate Authority.
> 
> What if I lost the keystore ? should I regen the CSR again to
> reapply the ssl cert?
> 
> Refer to 
> https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=SO832
>
> 
It will generate a new keystore file.
> 
> is it the file store the private key? which stated in 
> https://search.thawte.com/support/ssl-digital-certificates/index?page=content&id=SO750
>
> 
, which say
> 
> 1. Private Key file loss.
> 
> 2. Private Key pass phrase loss.
> 
> 3. Private Key file has been compromised due to the server being 
> hacked.

Any problem with the private key (loss/compromise), and you will have
to create a new private key and CSR, and request a new certificate.
You should formally revoke the old one if possible.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=NadG
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to