My log file seems to have a high number of these entries:
got CRL with bad signature, issued by StartCom Certification Authority::IL:StartCom Ltd.:Secure Digital Certificate Signing::
I sent the message to the SSL provider startssl.com and they have asked if I can pull more details?
Any ideas?
Did you imported all necessary CAs to the router, including subCAs and CA used to sign CRL?
+1 on this one.
I’m running v6.27 and am seeing the same error, with a different certificate.
(this is a new installation so I don’t know the behaviour with earlier software versions)
certificate,info got CRL with bad signature, issued by Deutsche Telekom Root CA 2::DE:Deutsche Telekom AG:T-TeleSec Trust Center::
And yes, I did import the entire certificate chain. The error comes from the top-most, the root certificate.
Any thoughts?
I withdraw my recent post b/c of my inability to read …
The certificate in question was indeed not the root cert, it just had a very similar name and properties. A closer look showed that the root cert was missing.
After importing it i’m getting successful CRL updates.