Re: HTTPS problems after latest PTF update.

Yep - we had that recently. A godaddy ca expired and broke all of our stuff, including things not using that cert chain.

On Mon, 2021-09-13 at 10:19 -0500, Brad Stone wrote:
Jon,

Check all your certificates and CAs for expired ones.  Delete any that are
expired.  This is a known IBM bug that is VERY odd.

It doesn't matter if the CA or cert has nothing to do with your
application, this error creeps up from time to time, so you have to delete
every expired cert (client, server, user created) and CAs.

On Mon, Sep 13, 2021 at 10:05 AM Jon Paris <[email protected]<mailto:[email protected]>> wrote:

Applied all the latest TR PTFs yesterday and today my HTTPS servers are
all failing.

The message in the log is:

"The default key has an expired certificate or the password of key
database file has expired, error = 107."

Neither of which appear to be true as best I can tell.  The DCMsays the
cert is good thru 2022 and it was all working immediately prior to the
update.

The problem only appears to affect HTTPS - all other web servers, web
services, etc. are all working OK.

Anyone seen this or got any ideas?


Jon Paris
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: [email protected]<mailto:[email protected]>
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]<mailto:[email protected]>
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.






[https://www.medtronsoftware.com/img/MedtronMinilogo.bmp]  Kevin  Bucknum
                   Senior Programmer Analyst
                   MEDDATA / MEDTRON
                   120 Innwood Drive
                   Covington LA 70433
                   Local: 985-893-2550
                   Toll Free: 877-893-2550
                 https://www.medtronsoftware.com



CONFIDENTIALITY NOTICE

This document and any accompanying this email transmission contain confidential information, belonging to the sender that is legally privileged.  This information is intended only for the use of the individual or entity named above.  The authorized recipient of this information is prohibited from disclosing this information to any other party and is required to destroy the information after its stated need has been fulfilled.  If you are not the intended recipient, or the employee of agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying, distribution or action taken in reliance on the contents of these documents is STRICTLY PROHIBITED.  If you have received this email in error, please notify the sender immediately to arrange for ret
 urn or destruction of these documents.
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.