AnsweredAssumed Answered

CertificateNotYetValidException error when upgrade version on Netwitness

Question asked by Worapot Ruanngam on Oct 7, 2019

I try to install upgrade version 11.3.1.0 to ESA server from SA Server but I always failed with this error. below from chef-solo.log

 

Any Idea for this error?

 

Note:the ntp.conf on SA Server always was change the configuration. And once when I reboot SA Server. It will change automatically. This is the clue that I found, machine time always change and this may be the cause of this 

 

>/var/log/netwitness/config-management/chef-solo.log

...

2019-10-07 19:00:29.100 ERROR 5047 --- [ main] c.r.n.i.s.client.SecurityApplication : Exception processing request

java.security.cert.CertificateNotYetValidException: Checked date: Mon Oct 07 19:00:29 ICT 2019 is before Certificate notBefore date: Tue Oct 08 01:44:32 ICT 2019
at com.rsa.cryptoj.o.pq.a(Unknown Source)
at com.rsa.cryptoj.o.pp.checkValidity(Unknown Source)

...

...

STDERR: [2019-10-07T19:00:29+07:00] <5042> (ERROR) Failed, aborting...
---- End output of security-cli-client --set-client-cert --chain-file /etc/pki/nw/node/node-cert.chain --in- file /etc/pki/nw/node/node-cert.pem --in-key-file /etc/pki/nw/node/node-key.pem ----
Ran security-cli-client --set-client-cert --chain-file /etc/pki/nw/node/node-cert.chain --in-file /etc/pki/n w/node/node-cert.pem --in-key-file /etc/pki/nw/node/node-key.pem returned 1
[2019-10-07T19:00:29+07:00] FATAL: Chef::Exceptions::ChildConvergeError: Chef run process exited unsuccessfu lly (exit code 1)

Outcomes