How to fix expired SSL certificate in JVM

[DCC1234]

Does anybody know what is needed to modify the SSL certificate expiration date in the JVM?

Not sure if this helps, but, below, I have pasted my debug output for command: jvm license info
08/07/2007 20:09:31
0 Java Snaplet ID: 1048577, Key: 0-0-0
1 Java Snaplet ID: 1052673, Key: 0-0-0
Number of licensed Java Snaplets: 2

Thank you very much for any assistance. mw

[blue68f100]

I have not found any info related to SSL.

The 3 keys (0-0-0) are for 40bit, 64bit, 128bit encryption. Do not know why the zeros are displayed. You should beable to create your own keys and do a cmd line to update the expired keys.

[DCC1234]

Thank you for the fast reply. I apologize if this is a neophyte question- but how would I create my own keys? What about the fact that the certifcate has expired?

[blue68f100]

A 40 bit security key is 10 hexdec, 64bit is 16, where a 128bit is 32. Most cases the lower keys are a sub set of the larger 128bit key.

jvm engine enable/disable
license {ADD/UPDATE/INFO} [{id} [{key-high-mid-low}]]
ssl on/off

There are sites that can generate these keys. https://www.grc.com/passwords.htmis one of them. You just need to parse it for your need.

Like I have said earlier I have not updated a SSL key, I do not use JVM on my servers. NOT RESPONSIBLE FOR WHAT MAY HAPPEN, Could work, Could also take out the original and have NO keys at all.

If I had to take a guess I think the cmd would be something like this:
jvm license update 1048577 Key-1C972FD1E0523228C5D16C6E94467382-1C972FD1E0523228-1C972FD1E0

If this works let me know and I will add it to FAQ's for all to find and use.

Look at FreeBSD Manual and see if there is a cmd to change the modified date. There are a lot of cmds that are not listed that works, mostly kernel cmds. These are not displayed when you use the ? in debug.

[DCC1234]

thanks, I called Adaptec and told them I would purchase a support contract if they had a way to edit the certificate details.

That got me into the tech support queue.

Eventually, a rep told me that there was no way to update the SSL certficate on the SNAP. I will write again if I find a way.

[blue68f100]

Since Adaptec bought them out they have layed off most of the SnapOS guys. We seam to use more cmds than they do. Try the cmd I posted, or see if you can locate the file, buy using the std linux cmds to move around from dbug. The file structure is similar to any linux os.

[DCC1234]

A couple of these SNAP's are at client sites, so I can't expirement with them too much. Still, This weekend, I'm going to try to rename the SNAP, uninstall and reinstall JVM and see if a new certificate gets issued to the new server name, ideally with a new expiration date. Then, I'll rename the server back to the original name and hope for the best. Again, I'll post here if that works.

[DCC1234]

The expiration on SSL only gets extended if you rename the snap

[blue68f100]

How long does it extend it?

[DCC1234]

Certificate got extended 2 years. This is what I did:

I disabled JAVA and renamed the SNAP/ reboot. Then re-enable JAVA- add SSL authentication and cert gets extended 2 years (with new name).

I tried the same procedure renaming the SNAP back to the old name but the certficiate expiration DID NOT get extended. I conclude from this that there is no way to extend the certificate expiration date unless you rename your SNAP.

I'm surprised that no one else has chimed in on this issue with a hack or work-around.