OpenSSL also changed its rehash algorithm in more recent versions. Have
you rehashed your CA cert directory?
Liam
On Tuesday, July 19, 2016, Phil Pishioneri <p...@psu.edu> wrote:
> On 07/18/2016 11:12 AM, Andrew Miller wrote:
> > Initially I saw these five error messages:
> > [Sun Jul 17 16:35:32.090667 2016] [:error] [pid 13173] mod_cosign:
> > snet_starttls: error:14090086:SSL
> > routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
>
> Your mod_cosign may be complaining that it can't verify the certificate
> presented by the other side - the WebAccess servers. If the CA
> certificate(s) in your CosignCrypto directory are still present, it
> could be permissions of files or directory paths, or the OpenSSL version
> changed from the 0.9.x to the 1.x familiy, and the hashes used by
> OpenSSL changed (and so the usual symlinks need recreated or augmented).
>
> -Phil
>
>
> ------------------------------------------------------------------------------
> What NetFlow Analyzer can do for you? Monitors network bandwidth and
> traffic
> patterns at an interface-level. Reveals which users, apps, and protocols
> are
> consuming the most bandwidth. Provides multi-vendor support for NetFlow,
> J-Flow, sFlow and other flows. Make informed decisions using capacity
> planning
> reports.http://sdm.link/zohodev2dev
> _______________________________________________
> Cosign-discuss mailing list
> Cosign-discuss@lists.sourceforge.net <javascript:;>
> https://lists.sourceforge.net/lists/listinfo/cosign-discuss
>
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity planning
reports.http://sdm.link/zohodev2dev
_______________________________________________
Cosign-discuss mailing list
Cosign-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/cosign-discuss
