Hi, we are using SSLv3 certs, and have a multi-master replication environment.

I have over 2000 clients currently using these CAs, and updating them to TLS 
seems highly disruptive.

Does anyone know of a way to add the updated TLS cert, while still honoring the 
old SSLv3 certs from clients?
Or perhaps a way to add new replicas in to the environment with the new TLS 
certs, but also add them in to the replication pool with the old SSLv3 systems?

Maybe a good guide/white paper on how to achieve this for PCI requirements?

Alexander Mayberry
Enterprise Systems Engineer
SD Group: EIT Infrastructure – OMA
Enterprise.Systems Engineering.Infrastructure
--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/[email protected]

Reply via email to