Re: HTTPS problems after latest PTF update.
Jon Paris <[email protected]>
| Newsgroups | gmane.comp.systems.as400.web |
|---|---|
| Message-ID | <[email protected]> |
Well it looks as if it is my old Zend Server 6 that has the issue. The error has now changed to No certs available rather than expired ... but I can't find what blasted app I'm supposed to assign. That will teach me to delete expired certs without checking who was using them! Jon paris > On Sep 13, 2021, at 12:26 PM, Brad Stone <[email protected]> wrote: > > Make sure you check all Certificate Authorities, Server and Client > certificates and any user certificates. If I recall that's at least 3 > different places in DCM you need to look. > > On Mon, Sep 13, 2021 at 10:58 AM Jon Paris <[email protected]> wrote: > >> Had several expired ones. Got rid of all of them plus I changed the DCM >> password (as per a similar issue Pete H had back in 2019) and restarted the >> HTTPS dependent servers. No change. >> >> Also tried restarting the entire TCP HTTP server setup - no joy. >> >> >> Jon Paris >> >>> On Sep 13, 2021, at 11:19 AM, Brad Stone <[email protected]> wrote: >>> >>> Jon, >>> >>> Check all your certificates and CAs for expired ones. Delete any that >> are >>> expired. This is a known IBM bug that is VERY odd. >>> >>> It doesn't matter if the CA or cert has nothing to do with your >>> application, this error creeps up from time to time, so you have to >> delete >>> every expired cert (client, server, user created) and CAs. >>> >>> On Mon, Sep 13, 2021 at 10:05 AM Jon Paris <[email protected]> >> wrote: >>> >>>> Applied all the latest TR PTFs yesterday and today my HTTPS servers are >>>> all failing. >>>> >>>> The message in the log is: >>>> >>>> "The default key has an expired certificate or the password of key >>>> database file has expired, error = 107." >>>> >>>> Neither of which appear to be true as best I can tell. The DCMsays the >>>> cert is good thru 2022 and it was all working immediately prior to the >>>> update. >>>> >>>> The problem only appears to affect HTTPS - all other web servers, web >>>> services, etc. are all working OK. >>>> >>>> Anyone seen this or got any ideas? >>>> >>>> >>>> Jon Paris >>>> -- >>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing >>>> list >>>> To post a message email: [email protected] >>>> To subscribe, unsubscribe, or change list options, >>>> visit: https://lists.midrange.com/mailman/listinfo/web400 >>>> or email: [email protected] >>>> Before posting, please take a moment to review the archives >>>> at https://archive.midrange.com/web400. >>>> >>>> >>> -- >>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing >> list >>> To post a message email: [email protected] >>> To subscribe, unsubscribe, or change list options, >>> visit: https://lists.midrange.com/mailman/listinfo/web400 >>> or email: [email protected] >>> Before posting, please take a moment to review the archives >>> at https://archive.midrange.com/web400. >>> >> >> -- >> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing >> list >> To post a message email: [email protected] >> To subscribe, unsubscribe, or change list options, >> visit: https://lists.midrange.com/mailman/listinfo/web400 >> or email: [email protected] >> Before posting, please take a moment to review the archives >> at https://archive.midrange.com/web400. >> >> > -- > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list > To post a message email: [email protected] > To subscribe, unsubscribe, or change list options, > visit: https://lists.midrange.com/mailman/listinfo/web400 > or email: [email protected] > Before posting, please take a moment to review the archives > at https://archive.midrange.com/web400. > -- This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list To post a message email: [email protected] To subscribe, unsubscribe, or change list options, visit: https://lists.midrange.com/mailman/listinfo/web400 or email: [email protected] Before posting, please take a moment to review the archives at https://archive.midrange.com/web400.