topic Re: x.509 certificate has expired in ExtremeWireless (Identifi)

x.509 certificate has expired

David_Cotos — Sat, 07 Mar 2020 04:04:41 GMT

Hello all, I’m not too familiar with the EWC setup at my company so bear with me.

C5210 controller with 3825i AP’s

I’m logged into the wireless controller and am looking at EWC Events - all. There are multiple daily entries that say x.509 Certificate (CN=x.x.x.x.crt) has expired.

In addition to that I see multiple AP session timeouts for AP’s in our building. I’m not sure which is worse or considered “normal”. I have gotten random calls from users having wireless IP/voip issues but sometimes an AP reboot fixes that problem.

Any ideas?

Re: x.509 certificate has expired

Jason1 — Mon, 09 Mar 2020 20:48:43 GMT

Hello David,

It sounds like there is a captive portal Topology/interface with a CA signed certificate installed, that has expired. For anyone using this network, the certificate avoids an error message in the browser when the portal page is shown.

For an expired certificate, it probably just needs a renewal and then having the new signed certificate uploaded to the Topology. If a new certificate is needed, this knowledge article will help - https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Install-Certificates-for-Captive-Portal

However, the certificate error should not cause client reboots or wireless client connectivity issues. If this is occurring most likely there is another reason for that and would require further investigation.

Regards,

Jason

Re: x.509 certificate has expired

David_Cotos — Tue, 10 Mar 2020 19:36:56 GMT

Hi Jason, I appreciate the input. I’ll go over the link you provided.

I looked over the logs again this morning and see continues AP disconnects. Should I call in a support ticket for this or do you guys have some options I should look into first?

Re: x.509 certificate has expired

Jason1 — Tue, 10 Mar 2020 22:09:16 GMT

Hi David,

I would suggest giving a call to open a case - AP disconnects can be caused by various reasons and GTAC can assist with that.

It would be helpful to gather any trace logs from AP’s that have disconnected. This KB shows where to download those - https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Collect-Access-Point-Logging-Information-Trace-Bundle

Thanks,

Jason