<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<div>
<div>
<div dir="ltr">Sovereign Citizen. That’s just funny.</div>
</div>
<div id="ms-outlook-mobile-signature">
<div><br>
</div>
<div dir="auto" style="color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);">
Thanks,</div>
<div dir="auto" style="color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);">
<br>
</div>
<div dir="auto" style="color: rgb(33, 33, 33); background-color: rgb(255, 255, 255);">
Ryan Huff</div>
</div>
</div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> cisco-voip <cisco-voip-bounces@puck.nether.net> on behalf of Hunter Fuller <hf0002@uah.edu><br>
<b>Sent:</b> Wednesday, May 24, 2023 12:14:27 PM<br>
<b>To:</b> Matthew Loraditch <MLoraditch@heliontechnologies.com><br>
<b>Cc:</b> Terry Oakley <Terry.Oakley@rdpolytech.ca>; voip puck <cisco-voip@puck.nether.net><br>
<b>Subject:</b> Re: [cisco-voip] [External] Re: Certificate issue and I am rubbish at certificates. (full disclosure)</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt;">
<div class="PlainText">2028 is WAY too far in the future. No modern browser trusts a<br>
publicly-issued certificate that is valid that far in the future. How<br>
did you even get that certificate.<br>
<br>
If you did a self signed, then that would explain why no browser<br>
trusts it. Self signed is the "sovereign citizen" of certificates. You<br>
need to get a certificate authority to sign your CSR.<br>
<br>
<a href="https://knowledge.digicert.com/generalinformation/2-year_Certificate_Availability.html">https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fknowledge.digicert.com%2Fgeneralinformation%2F2-year_Certificate_Availability.html&data=05%7C01%7C%7C33aae16f4f824da959ec08db5c72202d%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638205417463181216%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=F3nhWssXTK3oZj0mDi%2BySMTvinQ2iJcDRiQvQIMOVto%3D&reserved=0</a><br>
<br>
--<br>
Hunter Fuller (they)<br>
Router Jockey<br>
VBH M-1C<br>
+1 256 824 5331<br>
<br>
Office of Information Technology<br>
The University of Alabama in Huntsville<br>
Network Engineering<br>
<br>
On Wed, May 24, 2023 at 11:01 AM Matthew Loraditch<br>
<MLoraditch@heliontechnologies.com> wrote:<br>
><br>
> It sounds like something is different between the old and new certs (besides the dates). As far as clients accessing Unity via a browser, the callmanager-trust certs are not involved. I’m not even sure they are used at all on a Unity server. I’ve never touched
them.<br>
><br>
><br>
><br>
> I would take a look at the old and new certs and make sure the subject and SAN fields are all the same. There can be a lot of reasons for cert errors and the errors are all similar and hard to diagnose without access to the browser throwing the error, but
that’s the first thing I would check.<br>
><br>
><br>
><br>
><br>
><br>
><br>
> Matthew Loraditch<br>
> Sr. Network Engineer<br>
> direct: 443.541.1518<br>
> e: MLoraditch@heliontechnologies.com<br>
> <a href="http://www.heliontechnologies.com/">https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.heliontechnologies.com%2F&data=05%7C01%7C%7C33aae16f4f824da959ec08db5c72202d%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638205417463181216%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=9WGDmNKbNXHrjDes9vllJS%2FN9u4u5uEOOHMOeF4e5xk%3D&reserved=0</a><br>
<br>
><br>
> From: cisco-voip <cisco-voip-bounces@puck.nether.net> On Behalf Of Terry Oakley<br>
> Sent: Wednesday, May 24, 2023 11:35 AM<br>
> To: 'voip puck' <cisco-voip@puck.nether.net><br>
> Subject: [cisco-voip] Certificate issue and I am rubbish at certificates. (full disclosure)<br>
><br>
><br>
><br>
> [EXTERNAL]<br>
><br>
><br>
><br>
> On our Unity Connection server the certificates for Tomcat and Tomcat trust expired over the weekend, my oversight. I regenerated the certificates and both are now year 2028 expiry date. But we still get the same error if someone is trying to access their
inbox (<a href="https://server/inbox/">https://server/inbox/</a>) (error is You cannot visit server right now because the website uses HSTS)<br>
><br>
><br>
><br>
> I noticed that there is a CallManager-Trust certificate that expired on the same day as the Tomcat certs. The CallManager-Trust certificate is issued by the CA (CA signed) but when I go to Generate a CSR I don’t have the option to choose CallManager-Trust
or Trust . I have Tomcat, Tomcat ecdsa or ipsec. The common name for the expired CallManager-Trust certificate is the UnityConnection server that users cannot get too. Little confused as to where this CallManager Trust certificate can be generated from.<br>
><br>
><br>
><br>
><br>
><br>
> Thank you<br>
><br>
><br>
><br>
> Terry<br>
><br>
><br>
><br>
> _______________________________________________<br>
> cisco-voip mailing list<br>
> cisco-voip@puck.nether.net<br>
> <a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=05%7C01%7C%7C33aae16f4f824da959ec08db5c72202d%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638205417463181216%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=f8O9Ho0327p4Q3Ad%2FqZ5oIF2pwXLbqjow%2F102o0M1IM%3D&reserved=0</a><br>
_______________________________________________<br>
cisco-voip mailing list<br>
cisco-voip@puck.nether.net<br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip">https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpuck.nether.net%2Fmailman%2Flistinfo%2Fcisco-voip&data=05%7C01%7C%7C33aae16f4f824da959ec08db5c72202d%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638205417463181216%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=f8O9Ho0327p4Q3Ad%2FqZ5oIF2pwXLbqjow%2F102o0M1IM%3D&reserved=0</a><br>
</div>
</span></font></div>
</body>
</html>