ssl certificate expired

[aape...@ncsu.edu]

Hello iRODS team

On my iRODS server, from around one month ago, I can't iinit successfully - I get the error: 

remote addresses: xxx.x.xx.x ERROR: sslStart: error in SSL_connect. SSL error: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

[-]     /xxxxx/xxxxxxx/irods/plugins/auth/pam/libpam.cpp:223:irods::error pam_auth_client_request(irods::plugin_context &, rcComm_t *) :  status [SSL_HANDSHAKE_ERROR]  errno [] -- message [failed to enable ssl]

 failed with error -2103000 SSL_HANDSHAKE_ERROR

ERROR: sslAccept: error calling SSL_accept. SSL error: error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate expired

Version: I believe I'm at 4.2 version (can't verify that since I can't iinit into the iRODS server).

OS Version: CentOS release 6.7

Any idea why? On iRODS chat, I found a similar problem (search for "certificate expired"):

https://groups.google.com/forum/m/#!searchin/irod-chat/certificate$20expired/irod-chat/t0ABBLliEhE

However, this seems to be a different issue, about the iRODS repository. Am I correct that this thread is irrelevant to my problem?

I am due for an update, so if you prefer for me to simply update my OS and iRODS version, instead of trying to track down this issue, I'm fine with that. I was just curious to know why it was behaving so well for so long, then suddenly stopped.

Regards

Andrew Petersen

[aape...@ncsu.edu]

I found the reason- it was simply that my 2-3 year certificate expired. This requires action only from our (NCSU's) Security people.