Security

We are getting certificate expired alert for few clients , We have a valid certificate in the cppm trust list. Can anyone help on this issue.

RADIUS

EAP-TLS: fatal alert by server - certificate_expired TLS Handshake failed in SSL_read with error:14089086:SSL routines:ssl3_get_client_certificate:certificate verify failed eap-tls: Error in establishing TLS session

Check the certificate used by the client device, check the trust store for the relevant intermediate(s) and root.

------------------------------
Carson Hulcher, ACEX#110
------------------------------

Hello Mithran,

I'm with the same problem, my ClearPass is with firmware 6.11.7, what version your CP is using?

In my case the endpoints are receveing rejects and after some minutes the same endpoint receive accept without any changes.

Let me know if you can resolve this problem, please.

Regards,

Check whether several certificates are available in the client.

------------------------------
Regards,

Waldemar
ACCX # 1377, ACEP, ACX - Network Security
If you find my answer useful, consider giving kudos and/or mark as solution
------------------------------

Original Message:
Sent: May 27, 2024 08:54 AM
From: Rogasi
Subject: EAP-TLS: fatal alert by server - certificate expired

Hello Mithran,

I'm with the same problem, my ClearPass is with firmware 6.11.7, what version your CP is using?

In my case the endpoints are receveing rejects and after some minutes the same endpoint receive accept without any changes.

Let me know if you can resolve this problem, please.

Regards,