Error: 'The server's certificate has expired' (转)

本文介绍了解决服务器证书更新后仍显示过期错误的方法。通过替换服务器文档中认证的公钥并重启服务器来解决该问题。适用于Notes 5.x和6.x版本。

摘要生成于 C知道 ,由 DeepSeek-R1 满血版支持, 前往体验 >

Problem
You have recertified a server ID file that had recently expired; however, the following error displays when users attempt to connect to the server:

  • "The server's certificate has expired."
 
Solution
In this case, although the expired server ID file was recertified, the public key in the corresponding Server document did not get updated. You can resolve this issue by replacing the contents of the Certified Public Key field on the Administration tab of the Server document with the Public Key copied from the server ID file, and then recycling the Domino® server.
Notes® 6 and 7:
To copy a Public Key from a server ID file using the Release 6.x Admin client:

1. From the Domino Administrator, click the Configuration tab.
2. From the Tools pane, click Certification -> ID Properties.
3. Select and open the server ID file to be examined, then enter the password.
4. From the ID Properties window, select Your Identity, then select Your Certificates.
5. Select the Other Actions button and select Mail / Copy Certificate (Public Key)
6. Click the Copy Certificate button.
7. Open the Server document in edit mode, and select the Administration tab.
8. Paste the public key into the "Certified public key" field. (Note that, the "Certified public key" field is visible only when the Server document is open in edit mode.)
9. Recycle Domino.

Notes 5.x:
To copy a Public Key from a server ID file using the Release 5.x Admin client:

1. From the Domino Administrator, click the Configuration tab.
2. From the Tools pane, click Certification -> ID Properties.
3. Select and open the server ID file to be examined, then enter the password.
4. From the User ID window, select More Options.
5. Click the Copy Public Key button.
6. Open the Server document in edit mode, and select the Administration tab.
7. Paste the public key into the "Certified public key" field. (Note that, the "Certified public key" field is visible only when the Server document is open in edit mode.)
8. Recycle Domino.

Supporting Information:
In one case, the operating system date was ahead by several years (e.g., year 2156). The error no longer occurred once the date was corrected.
### 解决证书过期导致的请求错误问题 当遇到 `YN0001 RequestError certificate has expired` 错误时,表明用于验证服务器身份的SSL/TLS证书已失效。这通常发生在客户端尝试通过HTTPS连接到服务器时。 #### 诊断问题 为了确认问题是由于证书过期引起的,可以使用命令行工具如 OpenSSL 来检查远程主机上的证书状态: ```bash openssl s_client -connect example.com:443 -servername example.com </dev/null ``` 这条命令会显示有关目标站点当前使用的SSL证书的信息,包括其有效期[^1]。 #### 获取新证书 如果确实是因为现有证书到期,则需要联系负责管理该域名的人获取更新后的有效证书文件。对于自签名证书的情况,可能还需要重新创建新的私钥和CSR (Certificate Signing Request)[^2]。 #### 更新应用程序配置 一旦获得了最新的证书链(通常是.crt或.pem格式),就需要按照具体应用的要求将其安装到位。例如,在Node.js环境中设置HTTP代理时可以通过如下方式指定路径指向这些文件: ```javascript const https = require('https'); const fs = require('fs'); const options = { key: fs.readFileSync('/path/to/private-key.pem'), cert: fs.readFileSync('/path/to/certificate-chain.pem') }; https.createServer(options, function (req, res) { // 处理请求... }).listen(8000); ``` 此外,某些情况下也可以考虑临时忽略证书校验来测试其他潜在问题,但这仅限于开发环境内,并不推荐作为长期解决方案[^3]: ```javascript process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0"; // 进行业务逻辑处理 delete process.env.NODE_TLS_REJECT_UNAUTHORIZED; ```
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值