Renewing Smoothwall's certificate... clarification before I start

[getyourfill]

My first time having to do this..

 

I'm reading over the KB and it says push the newly created CA out before changing the default cert in Smoothwall.

 

Will this not cause any problems for users since they'll have two different certs for the same domain installed?

 

 

Also, this page says browsers will only accept Year long certs: https://techbeacon.com/security/google-apple-mozilla-enforce-1-year-max-security-certifications

 

Is this not going to affect the Smoothwall cert that's set for 3 years?

[ibpalle]

A certificate Authority only serves to validate certificates created by it - there will be no confusion having older CAs installed at the same time a new one is rolled out. CAs can be valid for just under 3 years. Use the top level CA Smoothwall creates for HTTPS inspection, not the 2nd level CA also generated - that one only has a lifespan of 1 year. The top level CA has just under three.