Hi, i generated a cert on friday, which works fine. but any that i've created today are returning a revoked error when i try to connect to the vpn. the generation appears to be working correctly, the validity of the cert appears to be OK. really not sure whats up, i've tried generating 3 and they all fail.
Wed Apr 30 10:36:46 2014 XX.XX.XX.XX:46584 TLS: Initial packet from [AF_INET]XX.XX.XX.XX:46584, sid=00ce402f 1d7ae2c8
Wed Apr 30 10:36:46 2014 XX.XX.XX.XX:46584 CRL CHECK OK: C=UK, ST=London, L=London, O=Blahcorp, OU=Hospitality, CN=Blahcorp Ltd CA, emailAddress=
mark.smith@blah.tv
Wed Apr 30 10:36:46 2014 XX.XX.XX.XX:46584 VERIFY OK: depth=1, C=UK, ST=London, L=London, O=Blahcorp, OU=Hospitality, CN=Blahcorp Ltd CA, emailAddress=
mark.smith@blah.tv
Wed Apr 30 10:36:46 2014 XX.XX.XX.XX:46584 CRL CHECK FAILED: C=UK, ST=London, L=London, O=Blahcorp Ltd, OU=Hospitality, CN=WindowsPRTG, emailAddress=
blah@blah-i.tv is REVOKED
Wed Apr 30 10:36:46 2014 XX.XX.XX.XX:46584 TLS_ERROR: BIO read tls_read_plaintext error: error:140890B2:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
Wed Apr 30 10:36:46 2014 XX.XX.XX.XX:46584 TLS Error: TLS object -> incoming plaintext read error
Wed Apr 30 10:36:46 2014 XX.XX.XX.XX:46584 TLS Error: TLS handshake failed
Wed Apr 30 10:36:46 2014 XX.XX.XX.XX:46584 SIGUSR1[soft,tls-error] received, client-instance restarting
the key looks to be ok
[root@master windows_keys]# cat 09.pem
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9 (0x9)
Signature Algorithm: sha1WithRSAEncryption
Issuer: C=UK, ST=London, L=London, O=Blahcorp Ltd, OU=Hospitality, CN=Blahcorp Ltd CA/emailAddress=
mark.smith@blah.tv
Validity
Not Before: Apr 30 09:25:03 2014 GMT
Not After : Apr 27 09:25:03 2024 GMT
Subject: C=UK, ST=London, L=London, O=Blah Ltd, OU=Hospitality, CN=Blah_windows/emailAddress=
Blah@blah-i.tv
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
Netscape Comment:
Easy-RSA Generated Certificate
X509v3 Subject Key Identifier:
F2:8C:02:7A:0A:0E:D8:D0:A7:44:77:CB:08:D6:CB:D4:7A:B1:2C:D1
X509v3 Authority Key Identifier:
keyid:72:3A:EB:A3:EF:5C:FB:DE:06:16:F8:14:B3:6C:B3:58:CF:2D:0E:FC
DirName:/C=UK/ST=London/L=London/O=BLahcorp Ltd/OU=Hospitality/CN=Blahcorp Ltd CA/emailAddress=
mark.smith@blah.tv
serial:B3:AC:DD:5B:4A:40:59:D2
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
Signature Algorithm: sha1WithRSAEncryption
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
