[Freeipa-devel] SSL Library Error: -12271 SSL client cannot verify your certificate

[Rob Crittenden]

dima vasiletc wrote:
> Hello
> all encryption connections finished with error (Error code:
> sec_error_reused_issuer_and_serial)
> And server write to log SSL Library Error: -12271 SSL client cannot
> verify your certificate
> First i think need check dns querys.
> I see many A querys for example.com
> May be i must regenerate certificate ? Where i can read about that .
> Thanks.
> 

You're seeing this in Firefox, right? Did you recently re-install freeIPA?

You probably just need to remove the CA and server from your browser 
security database:

Edit->Preferences->Advanced->View Certificates

Look under 3 tabs, Servers, Authorities and Others for "IPA Test 
Certificate Authority" or specific references to your IPA web server and 
delete them. Restarting your browser is probably a good idea too, then 
it should work fine.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20090616/67a3fa72/attachment.bin>