Thanks, Michael. That's useful. I'll follow up with our IT department. Sean
On Thu, 7 Jul 2022 at 10:23, Plate, Michael <[email protected]> wrote: > Hi Sean, > > your certificate chain is broken: > > openssl s_client -connect crdb.dut.ac.za:443 > > CONNECTED(00000003) > depth=0 C = ZA, postalCode = 4001, ST = KwaZulu-Natal, L = Durban, street > = Overport, street = 7 Ritson Road, O = Durban University of Technology, OU > = ITSS, CN = *.dut.ac.za > verify error:num=20:unable to get local issuer certificate > verify return:1 > depth=0 C = ZA, postalCode = 4001, ST = KwaZulu-Natal, L = Durban, street > = Overport, street = 7 Ritson Road, O = Durban University of Technology, OU > = ITSS, CN = *.dut.ac.za > verify error:num=21:unable to verify the first certificate > verify return:1 > depth=0 C = ZA, postalCode = 4001, ST = KwaZulu-Natal, L = Durban, street > = Overport, street = 7 Ritson Road, O = Durban University of Technology, OU > = ITSS, CN = *.dut.ac.za > verify return:1 > --- > Certificate chain > 0 s:C = ZA, postalCode = 4001, ST = KwaZulu-Natal, L = Durban, street = > Overport, street = 7 Ritson Road, O = Durban University of Technology, OU = > ITSS, CN = *.dut.ac.za > i:C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN > = Sectigo RSA Organization Validation Secure Server CA > --- > […] > > browsers accept this, other programs are more picky about chain order . > If you cant't get around it, try letsencrypt and install certbot (its in > debian packages, no need for snap) > > > Michael > > ________________________________________ > Von: [email protected] <[email protected]> im > Auftrag von Sean Carte <[email protected]> > Gesendet: Donnerstag, 7. Juli 2022 07:54 > An: Thiago Henrique Carvalho da Costa > Cc: DSpace Technical Support > Betreff: Re: [dspace-tech] Re: DSpace 7.2 behind a F5 internal firewall > with wildcard certificate > > […] > > -- > All messages to this mailing list should adhere to the Code of Conduct: > https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx > --- > You received this message because you are subscribed to the Google Groups > "DSpace Technical Support" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/dspace-tech/d00aa2e38fde4d2b8d28b164d724ce99%40bibliothek.uni-kassel.de > . > -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/CA%2BxAuhNMDoTNq4X-L0_V4A6eRF2Zx6n7iZa7xw9C-ApUpgWj9g%40mail.gmail.com.
