My Oracle Support Banner

Recreating the expired self-signed certs of dcs-admin (Doc ID 3000780.1)

Last updated on JULY 20, 2024

Applies to:

Oracle Database Appliance Software - Version 19.15.0.0.0 ODA to 19.21.0.0.0 ODA [Release 19]
Information in this document applies to any platform.

Goal

Vulnerability scan found that SSL certificate for ODA web console has expired, how do we renew it?

[root@odatest2b:~]# openssl s_client -connect 0.0.0.0:7060|openssl x509 -noout -dates
depth=0 OU = oda-dcsadmin, CN = odatest2b.<DOMAIN_NAME>
verify error:num=18:self signed certificate
verify return:1
depth=0 OU = oda-dcsadmin, CN = odatest2b.<DOMAIN_NAME>
verify error:num=10:certificate has expired
notAfter=Feb 10 02:20:15 2023 GMT
verify return:1
depth=0 OU = oda-dcsadmin, CN = odatest2b.<DOMAIN_NAME>
notAfter=Feb 10 02:20:15 2023 GMT
verify return:1
140499807848336:error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate:s3_pkt.c:1493:SSL alert number 42
140499807848336:error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:
notBefore=Nov 12 02:20:15 2022 GMT
notAfter=Feb 10 02:20:15 2023 GMT
 

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Goal
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.