[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-users] Certificate has expired or is not yet valid



I'm beginning to answer my own query. Just received this from Geotrust.

These instructions address the "certificate expired" warning experienced by
some Equifax SSL certificate servers that chain to the older Equifax root
(which expires 6/9/2002) rather than to the new Equifax root (which expires
6/9/2003). The newer root is attached. (See attached Root CA in both .txt
and .crt formats)



Since you are running Apache, you need to do three things:

1) Find the existing Equifax root, probably in your /conf/ssl.crt or similar
directory as "equifaxca2";

Replace this Equifax root with the one attached to this message, below.

Note - there may be more than one in your system.2) Verify that your
HTTPD.CONF directive (specifically

"SSLCACertificateFile..." and

"SSLCACertificatePath...") point to this Equifax root.

3) Stop, then Start (for example, "apachectl stop" then "apachectl
startssl") your server.








Sincerely, Tony
Geotrust Technical Support
1-866-GeoTrust
1-678-942-0400
ssltech@xxxxxxxxxxxx