SAP Knowledge Base Article - Public

3293602 - ERR_CERT_DATE_INVALID after successful SSL installation in CSB SSL tool - Recruiting Marketing

Symptom

Newly installed SSL certificate is not taken into account and browser still gives the error ERR_CERT_DATE_INVALID even though CSB shows the cert as installed and in date.

Environment

SAP SuccessFactors Recruiting Marketing

Reproducing the Issue

  1. Customer previously installed a standard SSL certificate via CSB for their domain such as  jobs.company.com
  2. Certificate is about to expire
  3. They install a new SSL but this time for a wildcard domain : *.company.com
  4. When expiration of the original cert is reached, the site become unavailable with an error NET: ERR_CERT_DATE_INVALID even though the new wildcard cert is installed and valid

Cause

The backend could not evaluate the dependencies because it handles the SSLs in bulk not by site. As Wildcards certs are evaluated later, they are not taken into account.

Resolution

The current behaviour will be enhanced in an upcoming release. 

In the meantime, please apply the following Workaround : uninstall the original expired SSL in CSB so the new wildcard cert is used instead.

  1. Open CSB
  2. Open SSL Tool tab
  3. In the presented list, select the expired original expired certificate
  4. Click on Uninstall 

Keywords

KBA , LOD-SF-RMK-CER , Certificate Renewal, IP Address, Domain , Problem

Product

SAP SuccessFactors Recruiting all versions