Automated SSL Certificate Renewal and Installation

[jspecht]

@nicholas.robinson

So essentially, if we can get back an SSL cert that has the full root chain and the private key, we can package those up as a PKCS12 and replace the ssl.pfx file in webserver.

Correct.

@nicholas.robinson

A question: if I wanted to automate a check afterwards to see if the new SSL cert is functioning, if I do this call to the SSL port and can get a response would that prove it or would there be a better way?

If your curl instance is configured to trust the root CA cert used in the cert chain you installed in the Gateway, and the {address} exists on the Gateway server cert's subject common name or subject alternative names, then that should work. You should get an HTTP 200 OK response which means the TLS handshake through which the HTTP connection is tunneled was successfully established.