Re: [Ejbca-develop] ERR_BAD_SSL_CLIENT_AUTH_CERT

[Tomas G. <Tom...@ke...>]

Great.

I actually found it as well in the troubleshooting guide in the documentaiton. The documentation is pretty large so it can be hard to find everything.

https://doc.primekey.com/ejbca/troubleshooting-guide/pki-management

Regards,
Tomas

________________________________
From: Jeremy Hansen via Ejbca-develop <ejb...@li...>
Sent: Sunday, August 27, 2023 12:20 AM
To: ejb...@li... <ejb...@li...>
Cc: Jeremy Hansen <je...@sk...>
Subject: Re: [Ejbca-develop] ERR_BAD_SSL_CLIENT_AUTH_CERT

CAUTION: External Sender - Be cautious when clicking links or opening attachments. Please email In...@ke... with any questions.

Figured this out from a post in another forum.  This made it easy.  I can’t find a “what do you do in this situation” in the docs.  Maybe I missed it.


"...I resolved the problem !!

I regenerate the superadmin.p12 with the same procedure; so i did:

./ejbca.sh ra setuserstatus superadmin 10
./ejbca.sh ra setclearpwd superadmin <MY PASSWD>
./ejbca.sh batch

I imported the new superadmin.p12 file in my browser and know it's OK !!”

-jeremy




On Saturday, Aug 26, 2023 at 2:13 AM, Me <je...@sk...<mailto:je...@sk...>> wrote:
It looks like my client certs may have expired for my EJBCA installation.  Can anyone point me in the right direction on how to regenerate this without access to the web interface?

Thanks
-jeremy