Re: SHA-2 certificates query

Posted by ErmanArslansOracleBlog on Mar 08, 2017; 6:18am
URL: http://erman-arslan-s-oracle-forum.124.s1.nabble.com/SHA-2-certificates-query-tp2269p2295.html

Everytime, if you change a certificate, then you need to reimport it to your wallet or cacerts file.
If the intermediate and root certificates that are associated with your new server certificate, are the same as the old, then you don't need to reimport them.

Also, if you offloaded the SSL work to the load balancer, then you don't need to do anything about SSL in EBS.(except reimporting the SSL cert to the mailer truststore and other autoconfig related SSL things)

Note that, if you don't import the SSL certificate in to the Mailer Truststore and if you have an https url set in the related profile options, then WF mailer will fail if it tries to generate the content for Applications Framework regions that are embedded in notifications.
Note that, WF mailer will fail only delivering the noficiations which include Applications Framework Regions.

Maybe that time, you didn't recognize this problem, because you didn't have any Applications Framework regions that are embedded in notifications during that period.