SSL/TLS Certificate expired

UCS - Univention Corporate Server
1

Hi everyone i just renewing my root ssl/tls certificate in for my univention ucs. I already followed this step: Renewing the SSL/TLS certificates. I already generate new certificate and do scp into the slave node. I tried to do rsync also to the slave node directory but got permission issue, so instead i’m using cp. Now i got this error when tried to login to slave portal: Internal server error.
{‘desc’: ‘Connect error’, ‘info’: ‘error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed (certificate has expired)’}. Is this error have to do cause i dont use rsync??

For everyone answer, i appriciate it. Thank you.
Best Regards.

2

No, this has nothing to do with rsync. According to the error message you posted, an expired certificate is being used. Could it be that an old certificate was accidentally copied?

What version of Univention UCS to you use?

If you execute this on your target server (slave):

openssl x509 -noout -text -in /etc/univention/ssl/ucsCA/CAcert.pem

Is that cert valid?

3

Thanks for your answer i already resolved it by restarting the umc service.

1 Like