Hi Sean,

your certificate chain is broken:

openssl s_client -connect crdb.dut.ac.za:443

CONNECTED(00000003)
depth=0 C = ZA, postalCode = 4001, ST = KwaZulu-Natal, L = Durban, street = 
Overport, street = 7 Ritson Road, O = Durban University of Technology, OU = 
ITSS, CN = *.dut.ac.za
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 C = ZA, postalCode = 4001, ST = KwaZulu-Natal, L = Durban, street = 
Overport, street = 7 Ritson Road, O = Durban University of Technology, OU = 
ITSS, CN = *.dut.ac.za
verify error:num=21:unable to verify the first certificate
verify return:1
depth=0 C = ZA, postalCode = 4001, ST = KwaZulu-Natal, L = Durban, street = 
Overport, street = 7 Ritson Road, O = Durban University of Technology, OU = 
ITSS, CN = *.dut.ac.za
verify return:1
---
Certificate chain
 0 s:C = ZA, postalCode = 4001, ST = KwaZulu-Natal, L = Durban, street = 
Overport, street = 7 Ritson Road, O = Durban University of Technology, OU = 
ITSS, CN = *.dut.ac.za
   i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = 
Sectigo RSA Organization Validation Secure Server CA
---
[…]

browsers accept this, other programs are more picky about chain order .
If you cant't get around it, try letsencrypt and install certbot (its in debian 
packages, no need for snap)


Michael

________________________________________
Von: [email protected] <[email protected]> im Auftrag von 
Sean Carte <[email protected]>
Gesendet: Donnerstag, 7. Juli 2022 07:54
An: Thiago Henrique Carvalho da Costa
Cc: DSpace Technical Support
Betreff: Re: [dspace-tech] Re: DSpace 7.2 behind a F5 internal firewall with 
wildcard certificate

[…]

-- 
All messages to this mailing list should adhere to the Code of Conduct: 
https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
--- 
You received this message because you are subscribed to the Google Groups 
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/dspace-tech/d00aa2e38fde4d2b8d28b164d724ce99%40bibliothek.uni-kassel.de.

Reply via email to