[BlueOnyx:13227] Re: Server certificate is expired: 'Server-Cert'

Colin Jack colin at mainline.co.uk
Mon Jun 17 15:42:03 -05 2013


Thanks Michael,

>> 
>> [Thu Jun 13 18:41:19 2013] [error] Server certificate is expired: 'Server-Cert'
> 
> In /etc/httpd/conf.d/nss.conf add the following line:
> 
> NSSEnforceValidCerts off
> 
> Then restart Apache and you're good again.
> 
> When SSL is enabled, a self signed certificate is generated for Apache.
> This cert eventually expires, although it's not really used for
> anything, as the SSL sites have their own SSL certificates.
> 
> Still, Apache will complain if a cert is expired and then refuses to
> start. The above option in nss.conf will allow Apache to start even
> though a cert is expired.
> 

Yup - did that already to get it running again. Just wondered how I could get it back with a new vaild self cert certificate?
So I can ignore it? If so, I will do that on all my servers to avoid potential future hassle.

Regards

Colin





More information about the Blueonyx mailing list