Re: BUG #4455: Valid SSL certificate reported as expired

Andrej Podzimek wrote:
> The following bug has been logged online:
>
> Bug reference:      4455
> Logged by:          Andrej Podzimek
> Email address:      andrej@podzimek.org
> PostgreSQL version: 8.3.3
> Operating system:   Linux 2.6.26.5
> Description:        Valid SSL certificate reported as expired
> Details:
>
> Hello,
>
> both psql and pgAdmin refuse to connect to my server using SSL, with this
> inexplicable error message:
>
>     Error connecting to the server: SSL error: sslv3 alert certificate
> expired
>
> CA certificate is valid till 2011.
> Server certificate is valid till 2009.
> Client certificate is valid till 2009.
>
> So the error message is obviously a nonsense.

Any chance this is a debian based distribution, and that the certificate
may be using a key that they have blacklisted due to the random number
problem? It may be that OpenSSL gives an incorrect error message in this
case...

If not, please try with the OpenSSL s_client/s_server applications with
the same certificates and see if it works there.

Also, check if there may be some kind of date issue with the CRL.

//Magnus