Re: HTTPS problems after latest PTF update.
Jon Paris <[email protected]>
| Newsgroups | gmane.comp.systems.as400.web |
|---|---|
| Message-ID | <[email protected]> |
Had several expired ones. Got rid of all of them plus I changed the DCM password (as per a similar issue Pete H had back in 2019) and restarted the HTTPS dependent servers. No change. Also tried restarting the entire TCP HTTP server setup - no joy. Jon Paris > On Sep 13, 2021, at 11:19 AM, Brad Stone <[email protected]> wrote: > > Jon, > > Check all your certificates and CAs for expired ones. Delete any that are > expired. This is a known IBM bug that is VERY odd. > > It doesn't matter if the CA or cert has nothing to do with your > application, this error creeps up from time to time, so you have to delete > every expired cert (client, server, user created) and CAs. > > On Mon, Sep 13, 2021 at 10:05 AM Jon Paris <[email protected]> wrote: > >> Applied all the latest TR PTFs yesterday and today my HTTPS servers are >> all failing. >> >> The message in the log is: >> >> "The default key has an expired certificate or the password of key >> database file has expired, error = 107." >> >> Neither of which appear to be true as best I can tell. The DCMsays the >> cert is good thru 2022 and it was all working immediately prior to the >> update. >> >> The problem only appears to affect HTTPS - all other web servers, web >> services, etc. are all working OK. >> >> Anyone seen this or got any ideas? >> >> >> Jon Paris >> -- >> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing >> list >> To post a message email: [email protected] >> To subscribe, unsubscribe, or change list options, >> visit: https://lists.midrange.com/mailman/listinfo/web400 >> or email: [email protected] >> Before posting, please take a moment to review the archives >> at https://archive.midrange.com/web400. >> >> > -- > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list > To post a message email: [email protected] > To subscribe, unsubscribe, or change list options, > visit: https://lists.midrange.com/mailman/listinfo/web400 > or email: [email protected] > Before posting, please take a moment to review the archives > at https://archive.midrange.com/web400. > -- This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list To post a message email: [email protected] To subscribe, unsubscribe, or change list options, visit: https://lists.midrange.com/mailman/listinfo/web400 or email: [email protected] Before posting, please take a moment to review the archives at https://archive.midrange.com/web400.