SSL Certificate Error
am 21.01.2008 21:24:09 von sherryberry
Hello,
One of the websites we host went down today. We tried to start httpd
and got a failed message. Upon looking into the nss_error_log file, we
found these errors:
[Mon Jan 21 13:35:45 2008] [error] Certificate not verified: 'Server-
Cert'
[Mon Jan 21 13:35:45 2008] [error] SSL Library Error: -8181
Certificate has expired
[Mon Jan 21 13:35:45 2008] [error] Unable to verify certificate
'Server-Cert'. Add "NSSEnforceValidCerts off" to nss.conf so the
server can start until the problem can be resolved.
1) No one has changed the configuration settings of SSL
2) SSL are not expired until 12/2008.
We have input the NSSEnforceValidCerts off into nss.conf but do not
have any idea why we are getting this error message. Please help!!
Re: SSL Certificate Error
am 22.01.2008 20:33:17 von sherryberry
On Jan 21, 2:51 pm, Davide Bianchi
wrote:
> On 2008-01-21, sherryberry wrote:
>
> > One of the websites we host went down today. We tried to start httpd
> > and got a failed message. Upon looking into the nss_error_log file, we
> > found these errors:
>
> > [Mon Jan 21 13:35:45 2008] [error] SSL Library Error: -8181
> > Certificate has expired
> > 1) No one has changed the configuration settings of SSL
> > 2) SSL are not expired until 12/2008.
>
> You sure you're looking at the same certificate? How did you checked
> that the certificate ain't expired?
>
> Davide
>
> --
> Plato, by the way, wanted to banish all poets from his proposed Utopia
> because they were liars. The truth was that Plato knew philosophers
> couldn't compete successfully with poets.
> -- Kilgore Trout (Philip J. Farmer) "Venus on the Half Shell"
We went to the site itself and right clicked on properties and clicked
on view certificates after adding the nssenforcevalidcerts off.
Besides, we had JUST bought the certificate. Why would it expire in
only a few days?