AAA, NAC, Guest Access & BYOD

 View Only
last person joined: one year ago 

Solutions for legacy and existing products and solutions, including Clearpass, CPPM, OnBoard, OnGuard, Guest, QuickConnect, AirGroup, and Introspect

Unable to see the root certificate after importing the certificate bundle 

Sep 29, 2015 08:06 PM

Problem:

Unable to see the root certificate after importing the certificate bundle. After installing the certificate bundle we do not see the root certificate under Administration » Certificates » Server Certificate  we see only the server certificate and the intermediate CA not the root CA.



Diagnostics:

From the tips Admin log we can an error for certificate chain as shown below,

2bkPXToHHZGThkspTOHcteHgM52zyzaRS/6htO7w+Q==
-----END CERTIFICATE-----
', '1', '2023-10-30 16:59:59.000000 -07:00:00', 'CN=Symantec Class 3 EV SSL CA - G3, OU=Symantec Trust Network, O=Symantec Corporation, C=US', '3010') was aborted. Call getNextException to see the cause.
duplicate key value violates unique constraint "tips_cert_trust_list_subject_dn_expiry_date_key"
Detail: Key (subject_dn, expiry_date)=(CN=Symantec Class 3 EV SSL CA - G3, OU=Symantec Trust Network, O=Symantec Corporation, C=US, 2023-10-30 16:59:59-07) already exists.
errorCode: 0
primaryCause: duplicate key value violates unique constraint "tips_cert_trust_list_subject_dn_expiry_date_key"
Detail: Key (subject_dn, expiry_date)=(CN=Symantec Class 3 EV SSL CA - G3, OU=Symantec Trust Network, O=Symantec Corporation, C=US, 2023-10-30 16:59:59-07) already exists.
sqlState: 23505
02/Sep/2015 05:42:19:144 ERROR com.avenda.tips.admin.client.web.SessionValidationInterceptor intercept - java.lang.IllegalStateException: getOutputStream() has already been called for this response
org.apache.jasper.JasperException: java.lang.IllegalStateException: getOutputStream() has already been called for this response



Solution

This issue will occur if we have space in the intermediate certificate while creating a certificate bundle. Even though the space exist in the certificate bundle we could still see the certificates getting uploaded but we will not see the root certificate in the Administration » Certificates » Server Certificate.

I have attached the screen shot to this Kb.

 


Attachments:
certificate bundle.JPG

Statistics
0 Favorited
3 Views
0 Files
0 Shares
0 Downloads

Related Entries and Links

No Related Resource entered.