Hello
expired CA certificate could also cause "SSL error: sslv3 alert certificate expired" error. You should check the validity of your CA certificate.
You can use this openssl command to verify your CA and your server certificate, see if it gives the same "certificate verify failed" error
openssl verify -verbose -CAfile $PATH_TO_CACERT $PATH_TO_SERVER_CERT
or it could be that your server clock is wrong, which is unlikely though.
best regards
Cary Huang
-----------------------------
Highgo Software (Canada)
www.highgo.ca
---- On Wed, 21 Jun 2023 08:05:15 -0700 Jeff Janes <jeff.janes@xxxxxxxxx> wrote ---
On Wed, Jun 21, 2023 at 6:11 AM Axel Rau <Axel.Rau@xxxxxxxxx> wrote:Hi all,
After upgrading to 13.11, Publisher no longer accepts cert of subscriber.What did you upgrade from? How did you do the upgrade?
Publisher:
"connection received: host=<some IP6> port=32501",,,,,,,,,"","not initialized"
"could not accept SSL connection: certificate verify failed",,,,,,,,,"","not initialized"
Your log files appear to have been mutilated. What column is 'not initialized' appearing in?Servercert:
...Validity
Not Before: Aug 18 09:12:35 2022 GMT
Not After : Aug 29 09:12:35 2023 GMTWhat about the validity of the CA?Cheers,Jeff
