Self Signed Certificate End Date on Cisco ISR4431/K9

[phamvinhdat]

I am working on renewing self-signed cert for SIP TLS between CUCM-CUBE. But I can't seem to find an option to specify the end date on generating the new cert. If I try it again, it just automatically use last day of the calendar year as end date. Is there an option to specify end date on generating self-signed cert?

=====================================================

Router Self-Signed Certificate
Status: Available
Certificate Serial Number (hex): 01
Certificate Usage: General Purpose
Issuer:
cn=MYCUBE.mycompany.com
Subject:
Name:MYCUBE.mycompany.com
cn=MYCUBE.mycompany.com
Validity Date:
start date: 19:31:26 CDT Oct 30 2019
end date: 18:00:00 CST Dec 31 2019
Associated Trustpoints: -CUBE

======================================================

Thanks,

DP

[Jaime Valencia · Accepted solution]

Sounds like this bug

Y2.02K: self-signed cert expires after 31 Dec 2019, cannot be created after 1 Jan 2020
CSCvi48253

[phamvinhdat]

Thanks Jamie,

Current router ios is "isr4400-universalk9.16.09.03.SPA.bin" , and it looks like later than version 16.9.1 as specify in Known Fixed Releases list. Is it possible same bug applies even with a later release version then the fixed one?

Thanks,

DP.

[Jaime Valencia]

You would need to open a TAC to have this investigated and if your version is not truly fixed, update the bug and then review your options if a fix is not yet available.

[phamvinhdat]

Thanks Jaime,

I have retried with a later IOS version as mentioned on fix in release and end date is now set to 12/31/2029.

Thanks,
DP.