ZeroSSL problem with CRL

RouterOS
1

Hi,

I created a certificate on ZeroSSL for my routerboard's https interface.
Everything seems to be working fine, but I found an error in the log:

So I checked the certificates and found, on CRL tab, an error:

"Status: DI"
"URL=http://cri.usertrust.com/USERTrustRSACertificationAuthority.crl"
"Certificate: Zerossl_ca_bundle.crt_0"

How can I fix Status?
2

On a pc. Open your web browser and paste the http url in the address bar.

http://cri.usertrust.com/USERTrustRSACertificationAuthority.crl

Does the crl file download?

If so, try rebooting the router.

3

Hi, I tried this before send my request. I have also update to last RouterOS… but without success..

Luca

4

Oh you just want an answer… That url is no longer valid. I don’t know why ZeroSSL is using an expired USER Trust Certificate and cross-signing it. If the Zero SSL CA bundle it working. Just disregard the Invalid crl error and just remove it from the CRL store.

Done

1 Like
5 
Thank you,
I'm amazed by what you're telling me. Next week I'll do as you suggested: I'll look for a link that hasn't expired.
Thank you so much.
Luca
1 Like