[cisco-voip] VCS 8.2 won't accept Trusted CA Cert with expiration date of 40 years from now - shows it as expired Dec 31, 1969

Josh Warcop josh at warcop.com
Thu Dec 4 12:11:53 EST 2014


Hah! Definitely sounds like a bug. Also that is a terrible security policy.

Sent from my Windows Phone
________________________________
From: Brian V<mailto:bvanbens at gmail.com>
Sent: ‎12/‎4/‎2014 11:26 AM
To: cisco-voip at puck.nether.net<mailto:cisco-voip at puck.nether.net>
Subject: [cisco-voip] VCS 8.2 won't accept Trusted CA Cert with expiration date of 40 years from now - shows it as expired Dec 31, 1969

Customer provided me their root CA and intermediate CA (internal) to load on
the VCS-C

The intermediate cert (expires in 20 yr) is loaded fine, when loading the
root cert (expires in 40 yr) it says its already expired in 1969 !



Is there a limit on the length of a Cert or perhaps just a bug in code ?

Anyone run into this before ?

This is the longest I've seen someone sign a cert for.  Is this common to
use such a long duration ?

I have a TAC case open, still waiting to be contacted by them.



VCS 8.2.1 software



Intermediate Cert

















____________________________________________

Brian Van Benschoten - CCIE # 5421  (R/S & Voice)

Managing Consultant - Unified Communications

Core BTS - North Central Region

3001 West Beltline Highway

Madison, WI  53713  USA

(P) +1 (608) 661-7780

(F) +1 (608) 661-7701

brian.vanbenschoten at corebts.com

www.corebts.com







-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/cisco-voip/attachments/20141204/a8a435cd/attachment.html>
-------------- next part --------------
_______________________________________________
cisco-voip mailing list
cisco-voip at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-voip


More information about the cisco-voip mailing list