X509_V_ERR_CERT_HAS_EXPIRED: certificate has expired

This forum is for general conversation and user-user networking.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
_Alien
OpenVpn Newbie
Posts: 3
Joined: Sun May 31, 2020 4:18 pm

X509_V_ERR_CERT_HAS_EXPIRED: certificate has expired

Post by _Alien » Sun May 31, 2020 4:43 pm

I was trying to connect to my company openvpn network via MacOS openvpn application and hitting the warning "The server vpn.my_company.com has an UNTRUSTED SSL certificate. Allow the connection to proceed?"

When clicking the "More details", the reason states that "X509_V_ERR_CERT_HAS_EXPIRED: certificate has expired". But then I have the option to connect anyway

And I checked for more info from the OpenVPN admin webpage, the Certificate "Validation Results" section displays:

Web Certificate/Key validation results.
Certificate Trust Warning: certificate has expired
Valid From: 2018.08.24 00:00:00 UTC
Valid Until: 2020.08.23 23:59:59 UTC
--> **which is few more months in future**

My certificate is issued by COMODO and its status is still active. Also, when I access the vpn.my_company.com via web browser, the certificate is still fine, i.e no warning about the expired certificate

Any idea why the OpenVPN application keeps warning me about expired cert? And is my connection via openvpn application actually unsecured? Or I can just ignore the warning?

Thanks a lot for any comment on this :)

TinCanTech
OpenVPN Protagonist
Posts: 11139
Joined: Fri Jun 03, 2016 1:17 pm

Re: X509_V_ERR_CERT_HAS_EXPIRED: certificate has expired

Post by TinCanTech » Sun May 31, 2020 4:47 pm

This does not sound like it has anything to do with openvpn but is a web certificate.

If you want to know howto proceed please see:
viewtopic.php?f=30&t=22603

User avatar
Pippin
Forum Team
Posts: 1201
Joined: Wed Jul 01, 2015 8:03 am
Location: irc://irc.libera.chat:6697/openvpn

Re: X509_V_ERR_CERT_HAS_EXPIRED: certificate has expired

Post by Pippin » Sun May 31, 2020 4:49 pm

I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
Halton Arp

_Alien
OpenVpn Newbie
Posts: 3
Joined: Sun May 31, 2020 4:18 pm

Re: X509_V_ERR_CERT_HAS_EXPIRED: certificate has expired

Post by _Alien » Sun May 31, 2020 5:03 pm

Pippin wrote:
Sun May 31, 2020 4:49 pm
I suspect:
viewtopic.php?f=22&t=30391
nice!! Thanks very much!! I think that explained, as my access on 30 May was still OK, until today, 31st May the issue comes.

Also, "A more modern browser would have the USERTrust root already installed and trust it without needing to rely on the older AddTrust root." --> I think that is why accessing the website via Chrome gives no warning. I notice that the Certificate chain display from the browser is showing COMODO RSA Certification Authority

However, I'm still not sure how to clear the warning message though

User avatar
Pippin
Forum Team
Posts: 1201
Joined: Wed Jul 01, 2015 8:03 am
Location: irc://irc.libera.chat:6697/openvpn

Re: X509_V_ERR_CERT_HAS_EXPIRED: certificate has expired

Post by Pippin » Sun May 31, 2020 5:13 pm

I would talk with "my_company.com"
I gloomily came to the ironic conclusion that if you take a highly intelligent person and give them the best possible, elite education, then you will most likely wind up with an academic who is completely impervious to reality.
Halton Arp

Post Reply