Expressway-Edge certificate validity expire

[geeta.kumari1]

Hi All,

Just want to understand that if the expressway edge certificate validity expires still the expressway edge present the cert. file to jabber client aland gives option to either decline/continue. It dose give me error that " cannot communicate to server ".

Post that if we still enter the login details we can see in logs that after all the srv record resolution process it fails to download the file from tftp and gives error " unable to locate server ".

If the certificate has expired will still the edge config request will be pass down to vcs control.

Do certificate expiration will cause login failure issue for jabber clients.

[zdesignstudio · Accepted solution]

If the certificate on the edge is expired then it is no longer valid and the connection between the edge and core will not be up. With this in mind, all traffic from the Internet (Jabber) will never reach the core expressway and thus never will reach CUCM or IM&P.

Certificates in an MRA setup need to ALWAYS be valid or it will no longer work.

Please rate useful posts and mark answers as complete if applicable.

[geeta.kumari1]

Hi Zdesign,

Many thanks for reply.

Yes tls communication will not establish with edge. For the very first attempt whrn auyo discovery happens for domain name it fails with certificate error at edge but if we still put the credential i  can see the request passes down the control, the config file is identified and during the tftp download it agains fail because of certificate. I was stuck in understanding why the request passed down to expressway control.