Issue with crowd SSL certificate

[Nayan Gupta]

My URL says that cert is expired :
Certificate Name: crowd.abc.net
IP: XXXX
Category: any
Issuer: crowd.abc.net
Status: expired
Reason: expired certificate
User:XXXX

But certificate is not expired on the server

Alias name: tomcat
Creation date: Feb 24, 2022

Valid from: Thu Feb 24 11:42:10 UTC 2022 until: Wed May 25 11:42:10 UTC 2022
Certificate fingerprints:

Not sure what to check here

[Ruslan Tkachuk]

Hi @Nayan Gupta 
If talking about the SSL certificate, then Crowd doesn't directly integrate with it. Only Apache Tomcat holds all required configurations for support SSL.

I checked the proposed configuration (official Atlassian Crowd documentation) with the Self-Signed certificate and with a certificate issued by CA (https://letsencrypt.org). In both cases, everything works as it should, but the Connector configuration for a certificate issued by Let's Encrypt is a little bit changed (see below).

So, if you are sure that it is all configured correctly, then I recommend trying to find the root cause of the problem on the client-side and maybe some recommendations provided in this article help you https://geeksadvice.com/fix-net-err-cert-date-invalid-error