Re: HTTPS problems after latest PTF update.

[Jon Paris <jon.paris@xxxxxxxxxxxxxx>]

OK - I'll take a look - thanks.



> On Sep 13, 2021, at 11:19 AM, Brad Stone <bvstone@xxxxxxxxx> wrote:
>
> Jon,
>
> Check all your certificates and CAs for expired ones.  Delete any that are
> expired.  This is a known IBM bug that is VERY odd.
>
> It doesn't matter if the CA or cert has nothing to do with your
> application, this error creeps up from time to time, so you have to delete
> every expired cert (client, server, user created) and CAs.
>
> On Mon, Sep 13, 2021 at 10:05 AM Jon Paris <jon.paris@xxxxxxxxxxxxxx> wrote:
>
> > Applied all the latest TR PTFs yesterday and today my HTTPS servers are
> > all failing.
> >
> > The message in the log is:
> >
> > "The default key has an expired certificate or the password of key
> > database file has expired, error = 107."
> >
> > Neither of which appear to be true as best I can tell.  The DCMsays the
> > cert is good thru 2022 and it was all working immediately prior to the
> > update.
> >
> > The problem only appears to affect HTTPS - all other web servers, web
> > services, etc. are all working OK.
> >
> > Anyone seen this or got any ideas?
> >
> >
> > Jon Paris
> > --
> > This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
> > list
> > To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: https://lists.midrange.com/mailman/listinfo/web400
> > or email: WEB400-request@xxxxxxxxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at https://archive.midrange.com/web400.
> -- 
> This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing list
> To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/web400
> or email: WEB400-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/web400.