Your certificate has not yet been signed by the certificate authority

HCL Domino Domino Forum
1

Since upgrading from Domino 7.0.3 to 8.0.1, I am unable to complete registration of users and servers. The registration process appears to work, but when adminp runs I see errors on the console like this: “Error processing certificate created by /MYHOUSE for Test User/MYHOUSE: Your certificate has not yet been signed by the Certificate Authority. Try again later.”

However, looking at the adminp requests (having seen that this problem has been reported before), all seems to be well. The certificate request says “issued by certification authority”, and the “recertify person” request has completed ok.

It all worked fine before the upgrade. Has anyone come across this before?

Thanks

Ben

2

Subject: I have same problem with servers

Hi

After registering an additional 8.0.1 server in a 8.0.1 environment with CA I edit the newly created server document - setting up security, Internet settings etc. But after answering all questions and pressing the last “Setup” button I get : “your certificate has not yet been signed by the certificate authority. Try again later”.

In adminp it says : “Recertifiy server in Domino Derictory” was completed and all looks fine.

I try marking the checkbox doing the recertify again, but same result.

Is this because I edit the server document before the server is running? Anyone else having the same problem?

3

Subject: Recreating server old way solved problem

I re-created the server with an old fashioned Cert ID file, and updated the existing entry. Then setup the server without using the previous attempt to setup, and it works now.

Strange. With users we have no problems.

4

Subject: Registering server with CA process

I have similar problem during registering server with CA process.While trying to setup server an error appear “Error processing certificate created by … for … Your certificate has not yet been signed by the Certificate Authority. Try again later”.

I can’t find any solution except registering server with ID file. :frowning:

5

Subject: Response

Did you roll over the certifier certificate prior to (re)certifying the users?

6

Subject: Re: rollover

Hi Chad,

No, I didn’t do that - should I have done?

Thanks

Ben

7

Subject: No, you didn’t need to

I wanted to see if you might be experiencing a particular issue, but you aren’t if you did not roll over the certifier’s key. Normally this condition is just a timing issue…are you testing with certificates you just created? Can you go back to any of the users you created previously and still reproduce the error? Note that even though CA and AdminP do their work, the results have to be replicated throughout the environment.