Hey again folks,
This is the first time I have had to do an SSL cert renewal on any Linux system, so apologies in advance if these are incredibly basic questions.
We have an existing cert provided by QuoVadis that expires early next month. Our Jamf web server is on Ubuntu and both Tomcat and the Jamf app are up to date. I'm aware I now need to generate a CSR from the web server, and then that will be used to purchase the new cert, which I then upload into Tomcat via the Jamf interface.
However, all the instructions I can find regard setting up from scratch, and I'm a little confused about how to handle this when we already have an existing keystore up and running. Do I use this existing keystore to generate a new CSR or create a new keystore from scratch?
If I use the existing keystore to generate the new CSR, will that invalidate the original cert immediately? Likewise if I generate a new keystore, I presume the original will then cease to work straight away?
If anybody has any working examples or a step-by-step guide for this it'd be hugely appreciated. Many thanks for your time everybody, as ever.
