cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2619
Views
0
Helpful
2
Replies

Error installing certificate

diondohmen
Level 1
Level 1

Dear community

I am having a problem refreshing the webauth cert on the WLC, running 7.6.110.0

I have tried everything, chaining, unchaining, openssl 0.9.8, openssl1.0 and I don't seem to manage this.

I assume openssl1.0 is supported on this software version right?

 

any help would be appreciated!

 

TFTP receive complete... Installing Certificate.
*TransferTask: Oct 03 11:42:41.619: Adding cert (5843 bytes) with certificate key password.

*TransferTask: Oct 03 11:42:41.640: sshpmCheckWebauthCert: Verification return code: 0

*TransferTask: Oct 03 11:42:41.640: Verification result text: unable to get local issuer certificate

*TransferTask: Oct 03 11:42:41.640: Error at 0 depth: unable to get local issuer certificate

*TransferTask: Oct 03 11:42:41.650: sshpmAddWebauthCert: Error decoding certificate, Deleting it.
*TransferTask: Oct 03 11:42:41.650: RESULT_STRING: Error installing certificate.

*TransferTask: Oct 03 11:42:41.650: RESULT_CODE:12

*TransferTask: Oct 03 11:42:41.650: Memory overcommit policy restored from 1 to 0


Error installing certificate.

*TransferTask: Oct 03 11:42:41.650: #UPDATE-3-CERT_INST_FAIL: updcode.c:2140 Failed to install certificate. rc = 2
*sshpmReceiveTask: Oct 03 11:42:37.360: #OSAPI-3-MUTEX_FREE_INFO: osapi_sem.c:1086 Sema 0x2b32c8f0 time=481 ulk=14143505 lk=14143024 Locker(sshpmReceiveTask sshpmrecv.c:1840 pc=0x10c93c40) unLocker(sshpmReceiveTask sshpmReceiveTaskEntry:1825 pc=0x10c93c40
-Traceback:  0x10c85090 0x108447f0 0x10c93c40 0x122e1fe0 0x123552ac

1 Accepted Solution

Accepted Solutions

Dhiresh Yadav
Cisco Employee
Cisco Employee

Hi , 

 

I dont know if you have followed the correct procedure as given here:

http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html

Additionally 7.6 allows chained certificate and that too complete trust chain should be present.

 

You can try installing it on before 7.6 , like 7.4 and verify if it installs there with out any issue. If yes then your certificate is not completely chained.

 

Regards

Dhiresh

View solution in original post

2 Replies 2

Dhiresh Yadav
Cisco Employee
Cisco Employee

Hi , 

 

I dont know if you have followed the correct procedure as given here:

http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/109597-csr-chained-certificates-wlc-00.html

Additionally 7.6 allows chained certificate and that too complete trust chain should be present.

 

You can try installing it on before 7.6 , like 7.4 and verify if it installs there with out any issue. If yes then your certificate is not completely chained.

 

Regards

Dhiresh

Hi Dhiresh,

 

I have already solved my issue.

Apparently I was using the wrong intermediate and root CA.

Review Cisco Networking products for a $25 gift card