Score:0

Migrating API to new server - Should I generate a new SSL certificate and what are the implications for clients?

se flag

I am migrating my API to a new server and both old and new server are running on Ubuntu 20.04 and Nginx. My SSL certificate was generated by certbot. Should I generate a new certificate on the new server or copy the certificate from the old server? Will generating a new certificate cause any issues for my clients, especially for the native android apps? How long will clients keep the old certificate details?

Score:1
la flag

Certificates are associated with DNS/host-names, not a specific server. Certificates can therefore be copied/migrated from an old server to a new server in preparation of changing the DNS record and as part of your migration strategy.

Also consider that when you for for example use the HTTP challenge to generate/renew the certificate for api.example.com; you can't easily do that (in advance) on the new server while the DNS record for api.example.com hasn't been updated yet and still points to your old server. Migrating the existing certificates makes sense then too.

Will generating a new certificate cause any issues for my clients, especially for the native android apps? How long will clients keep the old certificate details?

Generally the server certificate gets validated by clients each time a new connection get established. (That's why usually TLS connections are kept alive for a longer time and get re-used for subsequent requests rather than establishing a new connection for each request.) Those existing connections get dropped when the DNS records update takes effect.

The main risk when switching servers is probably not in the changed certificate but in the new server using different (and more) secure cryptographic ciphers and no longer supporting legacy ciphers that older and ancient devices rely on.

Sujith Manjavana avatar
se flag
All my clients are native android apps (API 24+) so I guess there won't be any cipher-related issues. So it’s better to generate a new certificate.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.