I've been asked to remove certificates from some of our servers, but I don't know anything about httpd configuration. If I have one server where if I do this
/usr/sbin/httpd -t -DDUMP_CERTS 2>/dev/null | /bin/sort -u
I get
/etc/httpd/certs/domain1.certificate
/etc/httpd/certs/domain2.certificate
/etc/httpd/certs/domain3.cert
/etc/pki/tls/certs/localhost.crt
and I only want to keep domain3.cert. How can I remove the others?
If /etc/pki/tls/certs/localhost.crt
is the only one on a machine, do I have to remove it in a different way? I tried commenting out the line mentioning that localhost.crt in /etc/httpd/conf.d/ssl.conf
but then httpd reports failed
when I do a service restart.