いつもお世話になっております。
ローカル管理のIAP稼働AP-515（8.5.0.8)をv8.10/8.12へバージョンアップする予定があり
IAP証明書について確認させてください。
https://arubanetworking.hpe.com/techdocs/Instant_8.x_RN_WebHelp/Content/8.6/overview86x.htm
Instant AOS-8 Release NotesのBehavioral Changesに
---
Instant AOS-8 Certificate Expiry Issue
Instant APs fail to load the Trust Anchor (TA) certificate bundle if it encounters an expired certificate within the bundle, because of an error in the Instant AOS-8 software. This error affects APs' ability to setup a secure SSL connection to Activate, Central, and AirWave, resulting in loss of connectivity to management platforms.
---
と記載されております。
質問
1.「the Trust Anchor (TA) certificate bundle」は具体的にどの証明書になりますでしょうか。
IAPのshow cert allは後に記します。
2.「if it encounters an expired certificate within the bundle」は"an"不特定なので、
IAP内に１つでも期限が切れた証明書が存在していれば、条件に該当してしまうのでしょうか。
# show cert all
Default Server Certificate:
Version :3
Serial Number :01:7E:54:9D:E5:XX:XX:XX
Issuer :/C=US/ST=California/O=Aruba Networks/OU=Instant/CN=Aruba515-CNJMKXXXXX
Subject :/C=US/ST=California/L=Sunnyvale/O=Aruba Networks/OU=Instant/CN=securelogin.arubanetworks.com
Issued On :Apr 2 00:26:31 2020 GMT
Expires On :Apr 1 00:26:31 2030 GMT
RSA Key size :2048 bits
Signed Using :SHA256-RSA
Default CP Server Certificate:
Version :3
Serial Number :01:7E:54:9D:E5:XX:XX:XX
Issuer :/C=US/ST=California/O=Aruba Networks/OU=Instant/CN=Aruba515-CNJMKXXXXX
Subject :/C=US/ST=California/L=Sunnyvale/O=Aruba Networks/OU=Instant/CN=securelogin.arubanetworks.com
Issued On :Apr 2 00:26:31 2020 GMT
Expires On :Apr 1 00:26:31 2030 GMT
RSA Key size :2048 bits
Signed Using :SHA256-RSA
Default Web UI Server Certificate:
Version :3
Serial Number :01:13:A2:72:87:XX:XX:XX
Issuer :/C=US/ST=California/O=Aruba Networks/OU=Instant/CN=Aruba515-CNJMKXXXXX
Subject :/C=US/ST=California/L=Sunnyvale/O=Aruba Networks/OU=Instant/CN=setmeup.arubanetworks.com
Issued On :Apr 2 00:26:31 2020 GMT
Expires On :Apr 1 00:26:31 2030 GMT
RSA Key size :2048 bits
Signed Using :SHA256-RSA
Device Certificate:
Version :3
Serial Number :12:E8:CD:8C:00:02:00:XX:XX:XX
Issuer :/UID=com/UID=arubanetworks/UID=devicesign/CN=Aruba Networks Trusted Computing Issuing CA 1
Subject :/CN=CNJMKXXXXX::d0:15:a6:ca:80:32
Issued On :Dec 11 05:23:11 2019 GMT
Expires On :Sep 14 03:21:14 2032 GMT
RSA Key size :2048 bits
Signed Using :SHA256-RSA
以上よろしくお願いいたします。