Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I just renewed the SSL certificate for a domain and installed the new files on my AWS server running Apache. All appears to be ok, but the browser still shows the old expiration date. Is there a way I can somehow "uncache" the certificate, or otherwise get a browser to display the new expiration date so I can tell if it's all working? I've tried restarting both Apache and the browser. Thanks!

share|improve this question
    
You sure this isn't simply a cache issue on your end? –  Ramhound Nov 14 '12 at 22:53
    
Nope, not sure. :-) Just don't know where to uncache it. I tried clearing the cache in the browser but it didn't help. Wondering if it's more of a system thing. I'm on Win7 64-bit, btw. –  Russell G Nov 14 '12 at 22:56
3  
You have to restart Apache. Certificate appears imediatelly after that or something is wrong. Or you have a proxy server. serverfault.com/questions/323817/… –  week Nov 14 '12 at 22:59
    
@week: Thanks for the link. I restarted Apache already actually, but it didn't help. But that link showed me how to use openssl to view the certificate being issued by Apache, and I verified that it is indeed the new cert, and that the expiration date is the new one. There's no proxy being used in this case though, so I'm still at a loss. Just so I understand, you're saying that after restarting Apache, all I should have to do is hit the web site again and then use the browser to view the new certificate? –  Russell G Nov 14 '12 at 23:32

1 Answer 1

Found the answer to my own problem. I'll post it here in case my stupidity helps someone else. :-)

I actually have two AWS web servers, with a load balancer in front of them. I discovered that the new certificate actually displayed fine in the browser if I hit each web server directly, but failed if I went to "www" through the load balancer.

I forgot to upload the new certificate files to the load balancer through AWS's Management Console. This page describes the process:

Updating an SSL Certificate for a Load Balancer

Note that the private and public key files you copy and paste there have to be in RSA format. This web page describes how to convert your files to that format if needed:

AWS Load Balancer SSL limitations

After all that, the browser immediately displays the new certificate. No delay, no caching. Thanks for the comments above anyway.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.