SSL Certificate requests

[scatcat]

Hi,

I'm running a commercial site on IBM Websphere (IBM HTTP Server). This is currently running on the 40bit encrypted version of the server.

I intend to upgrade to the 128bit version of server.

I already have a testing server that is running the 128 bit version of the server.

My question is:

Will I have to upgrade to 128bit encryption on the production server and then generate a Certificate request and then wait whilst the authority issues the license. This could take a couple of hours to a day or so, which is a lot of lost revenue.

Or can I generate a request on the testing server, using the domain name and details of the production server get the certificate issued, then upgrade to 128 bit and then use that certificate?

That would allow me to still run the site whilst I'm waiting for the certificate to be issued.

Is there any problem with this plan?

Thanks for any help in advance.

[jollymcfats]

It doesn't matter what machine you generate the request on- the key generation process is just mathematics, and the certificate part will use whatever information you enter, e.g. domain name, etc.

Just remember to bring the new private key to the production machine when you're installing the new signed public key!

I personally do all of my key generation and certificate requests in the "back office" instead of on the production servers.

[scatcat]

Thanks very much, that's very helpful.