TLS Keystores still issuing old certificate

[systemsdevelopm]

I've got six days left until the certificate that the clients see when hitting my domain expires. I have uploaded a new one into the TLS Keystores tab and that expires in May 2021. I've tried everything I can do in my browser to make sure it is not caching the certificate. There is no sign of the old certificate in the Keystores tab, under Dev, Prod or Portal.

How do I get Apigee to start sending out the new certificate on my portal and api domains?

[dknezic]

did you use a keystore reference?

Either way, it sounds like you need to open a support case requesting a router restart

[systemsdevelopm]

Under Environments > TLS keystores > prod I see four keystores, the 'freetrial' expired 2 months ago, the others expire in a year or more. Not sure what you mean by 'reference'

[dknezic]

https://docs.apigee.com/api-platform/system-administration/working-references

The advantage to using a reference is that you can change the value of the reference to change the keystore used by the virtual host, usually because the cert in the current keystore is expiring in the near future. Changing the value of the reference does not require you to restart the Edge Router.

I'd recommend you change to using a reference, then hopefully future changes will work