TLS read fatal alert "certificate expired"

[lolodu13]

Hi guys,

I have a weird issue,

I run a proxy zabbix server with 15 agents ,

and in tail -f /var/log/zabbix/zabbix_proxy.log


I got :

: error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate expired: SSL alert number 45: TLS read fatal alert "certificate expired"
25281:20180829:171718.610 failed to accept an incoming connection: from 10.231.26.232: TLS connection has been closed during handshake: file s3_pkt.c line 1275: error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate expired: SSL alert number 45: TLS read fatal alert "certificate expired"


and the same error on the agent server:

tail -f /var/log/zabbix/zabbix_agentd.log

9910:20180829:171713.982 failed to accept an incoming connection: from 10.231.12.18: unencrypted connections are not allowed
9911:20180829:171719.515 failed to accept an incoming connection: from 10.231.12.14: unencrypted connections are not allowed
9911:20180829:171723.354 failed to accept an incoming connection: from 10.231.12.18: unencrypted connections are not allowed
9912:20180829:171729.514 failed to accept an incoming connection: from 10.231.12.14: unencrypted connections are not allowed
9912:20180829:171733.729 failed to accept an incoming connection: from 10.231.12.18: unencrypted connections are not allowed
9912:20180829:171739.727 failed to accept an incoming connection: from 10.231.12.14: unencrypted connections are not allowed
9911:20180829:171744.107 failed to accept an incoming connection: from 10.231.12.18: unencrypted connections are not allowed
9912:20180829:171749.659 failed to accept an incoming connection: from 10.231.12.14: unencrypted connections are not allowed
9912:20180829:171753.105 failed to accept an incoming connection: from 10.142.65.137: TLS connection has been closed during handshake: file s3_pkt.c line 1275: error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate expired: SSL alert number 45: TLS read fatal alert "certificate expired"
9911:20180829:171753.472 failed to accept an incoming connection: from 10.231.12.18: unencrypted connections are not allowed


Certificates are still valid on proxy and agent servers...so I dont know what to do, because I have PROBLEM: Zabbix agent on intbigdata2s012.int unreachable for 5 minutes

any help will be apreciate.
thanks

[jan.garaj]

Do you have correct time on your server? How did you verify expiry date of your certs?

[lolodu13]

hi
I have fixed the issue, the cacert were expired
thanks