PCI SSL TLS certificate requirements change

"Mayberry, Alexander" <AMayberry@xxxxxxxx> · Mon, 28 Dec 2015 17:50:11 +0000

Hi, we are using SSLv3 certs, and have a multi-master replication environment.

I have over 2000 clients currently using these CAs, and updating them to TLS seems highly disruptive.

Does anyone know of a way to add the updated TLS cert, while still honoring the old SSLv3 certs from clients?

Or perhaps a way to add new replicas in to the environment with the new TLS certs, but also add them in to the replication pool with the old SSLv3 systems?

Maybe a good guide/white paper on how to achieve this for PCI requirements?

Alexander Mayberry 

Enterprise Systems Engineer
SD Group:
EIT Infrastructure – OMA
Enterprise.Systems Engineering.Infrastructure

--
389 users mailing list
389-users@%(host_name)s
http://lists.fedoraproject.org/admin/lists/389-users@xxxxxxxxxxxxxxxxxxxxxxx