Re: HTTPS problems after latest PTF update.

Expired certs are of no use.

On Mon, Sep 13, 2021 at 12:46 PM Jon Paris <[email protected]> wrote:

> Well it looks as if it is my old Zend Server 6 that has the issue.
>
> The error has now changed to No certs available rather than expired ...
> but I can't find what blasted app I'm supposed to assign.
>
> That will teach me to delete expired certs without checking who was using
> them!
>
>
> Jon paris
>
> > On Sep 13, 2021, at 12:26 PM, Brad Stone <[email protected]> wrote:
> >
> > Make sure you check all Certificate Authorities, Server and Client
> > certificates and any user certificates.  If I recall that's at least 3
> > different places in DCM you need to look.
> >
> > On Mon, Sep 13, 2021 at 10:58 AM Jon Paris <[email protected]>
> wrote:
> >
> >> Had several expired ones. Got rid of all of them plus I changed the DCM
> >> password (as per a similar issue Pete H had back in 2019) and restarted
> the
> >> HTTPS dependent servers. No change.
> >>
> >> Also tried restarting the entire TCP HTTP server setup - no joy.
> >>
> >>
> >> Jon Paris
> >>
> >>> On Sep 13, 2021, at 11:19 AM, Brad Stone <[email protected]> wrote:
> >>>
> >>> Jon,
> >>>
> >>> Check all your certificates and CAs for expired ones.  Delete any that
> >> are
> >>> expired.  This is a known IBM bug that is VERY odd.
> >>>
> >>> It doesn't matter if the CA or cert has nothing to do with your
> >>> application, this error creeps up from time to time, so you have to
> >> delete
> >>> every expired cert (client, server, user created) and CAs.
> >>>
> >>> On Mon, Sep 13, 2021 at 10:05 AM Jon Paris <[email protected]>
> >> wrote:
> >>>
> >>>> Applied all the latest TR PTFs yesterday and today my HTTPS servers
> are
> >>>> all failing.
> >>>>
> >>>> The message in the log is:
> >>>>
> >>>> "The default key has an expired certificate or the password of key
> >>>> database file has expired, error = 107."
> >>>>
> >>>> Neither of which appear to be true as best I can tell.  The DCMsays
> the
> >>>> cert is good thru 2022 and it was all working immediately prior to the
> >>>> update.
> >>>>
> >>>> The problem only appears to affect HTTPS - all other web servers, web
> >>>> services, etc. are all working OK.
> >>>>
> >>>> Anyone seen this or got any ideas?
> >>>>
> >>>>
> >>>> Jon Paris
> >>>> --
> >>>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> >>>> list
> >>>> To post a message email: [email protected]
> >>>> To subscribe, unsubscribe, or change list options,
> >>>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>>> or email: [email protected]
> >>>> Before posting, please take a moment to review the archives
> >>>> at https://archive.midrange.com/web400.
> >>>>
> >>>>
> >>> --
> >>> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400)
> mailing
> >> list
> >>> To post a message email: [email protected]
> >>> To subscribe, unsubscribe, or change list options,
> >>> visit: https://lists.midrange.com/mailman/listinfo/web400
> >>> or email: [email protected]
> >>> Before posting, please take a moment to review the archives
> >>> at https://archive.midrange.com/web400.
> >>>
> >>
> >> --
> >> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> >> list
> >> To post a message email: [email protected]
> >> To subscribe, unsubscribe, or change list options,
> >> visit: https://lists.midrange.com/mailman/listinfo/web400
> >> or email: [email protected]
> >> Before posting, please take a moment to review the archives
> >> at https://archive.midrange.com/web400.
> >>
> >>
> > --
> > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> > To post a message email: [email protected]
> > To subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/web400
> > or email: [email protected]
> > Before posting, please take a moment to review the archives
> > at https://archive.midrange.com/web400.
> >
>
> --
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> list
> To post a message email: [email protected]
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: [email protected]
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.
>
>
-- 
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
To post a message email: [email protected]
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: [email protected]
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.