A deployer may set these variables prior to executing an upgrade if this is desired. The upgrade script should not make this deployer decision. If these variables are not set then new certs will be generated which, IMO, is not a bad thing for self-signed certs.
A deployer may set these variables prior to executing an upgrade if this is desired. The upgrade script should not make this deployer decision. If these variables are not set then new certs will be generated which, IMO, is not a bad thing for self-signed certs.