CODEWITHSUNDEEP
javacertificatekeytool
Brian Beckett
Brian Beckett

Reputation: 4900

Renew certificate with Java Keytool - reuse old CSR?

I have an SSL certificate in a Java keystore. It's going to expire in a week or so and I need to renew it.

Can I reuse the previous CSR (which the CA still have) and then import the certificate using the import command or do I need to generate a new CSR?

Upvotes: 8

Views: 18004

Answers (1)

bignum
bignum

Reputation: 3458

You can (if your CA doesn't check for public key reuse), but it's a bad security practice. The primary purpose of the validity period is to limit the time in which a certificate and associated private key is exposed to the possibility of being compromised.

Upvotes: 7

Related Questions