wso2carbon.jks and client-truststore.jks expired on Jan 7 2025.

[zeonixtech]

Description

WARN {org.apache.tomcat.util.net.SSLUtilBase} - The trusted certificate with alias [wso2carbon] and DN [CN=localhost, OU=WSO2, O=WSO2, L=Santa Clara, ST=CA, C=US] is not valid due to [NotAfter: Tue Jan 07 15:29:37 IST 2025]. Certificates signed by this trusted certificate WILL be accepted

Steps to Reproduce

1. Running Application start giving error "Error during SSL Handshake with remote server"
2. Upon investigation we found that wso2carbon.jks and client-truststore.jks expired on Jan 7 2025.
3. Tried to regenerate the certificates from this Post https://ei.docs.wso2.com/en/7.0.0/micro-integrator/setup/security/creating_keystores/
4. Still nogo.. please advise or upload new keystores !

Version

wso2is-7.0.0

Environment Details (with versions)

No response

[zeonixtech]

PS: In Apache2 I have used the following config to bypass the SSL check in order to patch this issue :

• SSLProxyEngine on
• SSLProxyVerify none
• SSLProxyCheckPeerCN off
• SSLProxyCheckPeerName off
• SSLProxyCheckPeerExpire off