how to update the certificate and key in apigee hybrid

[#1]

we have apigee hybrid set up. our cn name was wrong in the certificate. SO, we created a new set of self-signed certificate and key. Now we want to apply the change.

Please share the steps to do the same. I am new to apigee hybrid.

Thanks in advance...

[kurtkanaskie · Accepted solution]

Hi @Priyadarshi Ajitav Jena,

I had a similar issue, I wasn't using the fuillchain, so I had to re-apply the new certs.

SO, you should be able to modify the overrides.yaml to use the new certs::

virtualhosts:
  - name: test
    sslCertPath: ./certs/fullchain.pem
    sslKeyPath: ./certs/privkey.pem

Then run apigeectl with dry-run flag and if all looks good apply the changes.

$APIGEECTL_HOME/apigeectl apply -f overrides/overrides.yaml --dry-run=true
$APIGEECTL_HOME/apigeectl apply -f overrides/overrides.yaml

Hope that helps.

[kurtkanaskie · Accepted solution]

Hi @Priyadarshi Ajitav Jena,

I had a similar issue, I wasn't using the fuillchain, so I had to re-apply the new certs.

SO, you should be able to modify the overrides.yaml to use the new certs::

virtualhosts:
  - name: test
    sslCertPath: ./certs/fullchain.pem
    sslKeyPath: ./certs/privkey.pem

Then run apigeectl with dry-run flag and if all looks good apply the changes.

$APIGEECTL_HOME/apigeectl apply -f overrides/overrides.yaml --dry-run=true
$APIGEECTL_HOME/apigeectl apply -f overrides/overrides.yaml

Hope that helps.

[#4]

Thanks for the response. Let me try the same.

[#5]

This is not updating my certificate. can you please help more?

[Giupo]

Can we isolate the command scope with ‑‑settings virtualhosts?

[#7 · Accepted solution]

yes, got this resolved. We were trying to the correct with the wrong environment name.

Once we corrected, its worked.