Re: having trouble assigning certificate to app

[Brad Stone <bvstone@xxxxxxxxx>]

Ya, just delete them.  Check for other client/server certs and CAs and even
self-signed certs that may be expired and delete them.

I'll never understand why IBM does this when they have nothing to do with
the CAs/certs that are being worked with.  And it's very inconsistent.

On Tue, Mar 29, 2022 at 5:08 PM Tom Hightower <tomh@xxxxxxxxxxx> wrote:

> That could be, I have these two expired:
>
> -USERTrustRSAAddTrustCA.crt  expired 5/30/2020
> -AddTrustExternalCARoot.crt  expired 5/30/2020
>
> Apparently those have been on our various AS400 -> i systems for *years*.
>
> I'll check with network guys to see if they can provide updated
> certificates.  If they don't have them, is there somewhere they can be
> downloaded?
>
> TomH
>
> -----Original Message-----
> From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> On Behalf Of Rob
> Williams via MIDRANGE-L
> Sent: Tuesday, March 29, 2022 9:50 AM
> To: midrange-l@xxxxxxxxxxxxxxxxxx
> Cc: Rob Williams <qpgmr400@xxxxxxxxxxxxxxx>
> Subject: RE: having trouble assigning certificate to app
>
> I have seen that exact message and situation once before and the cause was
> one of the CA Certificates (or Root Certificate) in the chain had expired.
>
> You can use the following query to view the certificates in your
> certificate store.
>
> SELECT CERTIFICATE_LABEL as CERT_LABEL,
> VALIDITY_START, VALIDITY_END,
> SUBJECT_COMMON_NAME as SUBJECT_CN,
> ISSUER_COMMON_NAME as ISSUER_CN
> FROM TABLE(QSYS2.CERTIFICATE_INFO(CERTIFICATE_STORE_PASSWORD=>
>     '*NOPWD'))
>
>
> https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ibm.com%2Fdocs%2Fen%2Fi%2F7.4%3Ftopic%3Dservices-certificate-info-table-func&amp;data=04%7C01%7Ctomh%40idocket.com%7C803529d5cb5b4d81026208da119358dc%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C637841621792372836%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=a0DbW9YngVrsSjDlAP05swxPSoaYJZq3sd%2BW1V8c1Ws%3D&amp;reserved=0
> tion
>
> Rob
>
>
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx To subscribe,
> unsubscribe, or change list options,
> visit:
> https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.midrange.com%2Fmailman%2Flistinfo%2Fmidrange-l&amp;data=04%7C01%7Ctomh%40idocket.com%7C803529d5cb5b4d81026208da119358dc%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C637841621792372836%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=KAhNS83gVceWNu7FpaTg1hLeGPH8hGgeB%2FP%2Fr4FEG2M%3D&amp;reserved=0
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives at
> https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Farchive.midrange.com%2Fmidrange-l&amp;data=04%7C01%7Ctomh%40idocket.com%7C803529d5cb5b4d81026208da119358dc%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C637841621792372836%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=NQrU1SWHJ9niIhTTTJwI676Eefqm7gu%2FCwtbDogkcw4%3D&amp;reserved=0
> .
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link:
> https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Famazon.midrange.com%2F&amp;data=04%7C01%7Ctomh%40idocket.com%7C803529d5cb5b4d81026208da119358dc%7Ccfcc5bb848014360aa721ecceeb7d0b3%7C0%7C0%7C637841621792372836%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000&amp;sdata=PQjCEKTTHrEpXz5fVROoFnHuBjHFa9%2F%2B2aEA4v54d9M%3D&amp;reserved=0
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: https://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at https://archive.midrange.com/midrange-l.
>
> Please contact support@xxxxxxxxxxxxxxxxxxxx for any subscription related
> questions.
>
> Help support midrange.com by shopping at amazon.com with our affiliate
> link: https://amazon.midrange.com