message='java.security.cert.CertificateExpiredException

By: Ben Granholm user 03 Jan 2019 at 6:53 a.m. CST

4 Responses
Ben Granholm gravatar
The self signed certificates created upon building the gluu server have expired. There are instructions on how to renew the apache cert in the documentation but not how to renew all of the other certificates. How do I renew all of the certs?
Ubuntu 16.04
closed

Answers

By Ben Granholm user 03 Jan 2019 at 11:46 a.m. CST

Copy
Ben Granholm gravatar
So, I did get this working, kind of. I went through the setup.log file and recreated every cert and updated the appropriate keystores. However, the whole purpose of this server is for single sign on with comcast xfinityoncampus.com and now, with the new certs, I get a 500 error from comcast that single signon failed. Does generating new keys make a new metadata file?

By Ben Granholm user 04 Jan 2019 at 7:24 a.m. CST

Copy
Ben Granholm gravatar
So, answered my own question, yes it does. But that shouldn't be a problem as they have the URI. Other than renewing the certificates, is there anything else that needs to be done?

By Mohib Zico Account Admin 11 Jan 2019 at 12:21 p.m. CST

Copy
Mohib Zico gravatar
>> Other than renewing the certificates, is there anything else that needs to be done? Nothing much; just services restart or gluu-server container restart.

By Ben Granholm user 11 Jan 2019 at 12:31 p.m. CST

Copy
Ben Granholm gravatar
That did not work for some reason. Took it as a good time to build a new server 3.1.4 since we were on 3.1.1. All set.

Post an answer