What does the exception "Expired SSL Server Certificate (ssl_server_cert_expired)" mean?


<< Back to Knowledge Search

Solution

Overview

If your ProxySG appliance is configured to intercept HTTPS traffic, you may see cases where the proxy presents the exception: "Expired SSL Server Certificate" and the following default error message:

Expired SSL Server Certificate (ssl_server_cert_expired)
Your request contacted a host which presented an expired or Invalid certificate
This is typically caused by a Web Site presenting an incorrect or invalid certificate, but could be because of a configuration error.

For assistance, contact your network support team.
 
This can be caused by a certificate that has either expired or is not yet valid, (issued for a future date).
 
 
 
The problem could also be related to a Proxy time and date misconfiguration. You can check the clock and date from the Proxy's Web-Based Management Console:
 
 
 
or from the CLI:
 
10.91.22.2 - Blue Coat SG210 Series>show clock
 
UTC time:     2001-09-26 14:58:50+00:00UTC
 
Local time:   2001-09-26 14:58:50-00:00UTC
 
Timezone:     UTC
 
 
 
If the certificate has expired, create a new one to replace it.
Cause
Resolution
Workaround
Additional Information
Bug Number
InQuira Doc IdFAQ1586
Attachment

Article Feedback

Hide Properties
First Published      10/01/2014
Last Modified      10/01/2014
Last Published      10/01/2014
Article Audience
Product      ProxySG
Topic      Errors / Event Logs / Alerts, SSL / HTTPS
Article Number      000016986
Summary     
Was this helpful?
Comments:
 
Previous MonthNext Month
SunMonTueWedThuFriSat