Page 1 of 1

LE Cert, Root SSL expiration, WIN7 BEWARE!!

PostPosted: Wed Sep 29, 2021 11:24 pm
by Nefariousparity
Start happening today to our clients still running windows 7.

https://www.venafi.com/blog/lets-encryp ... ted-venafi

Find a known good, and import the new ROOT part of the cert the legacy workstation. Better instructions coming soon.

Re: LE Cert, Root SSL expiration, WIN7 BEWARE!!

PostPosted: Thu Sep 30, 2021 9:56 am
by LC2003
solution ?

Re: LE Cert, Root SSL expiration, WIN7 BEWARE!!

PostPosted: Thu Sep 30, 2021 1:19 pm
by Nefariousparity
We actually ran into this issue with a lot of call centers and spent most of the day getting them up and running. It does not only affect winn7/chrome it also affects mac Catalina, PlayStation and older android phones (pre8). Afaik Mac has a security patch out for it. https://techcrunch.com/2021/09/21/lets- ... ot-expiry/

Here is the fix and the problem in win7

The root cert and intermediate for some reason don't seem to be updating. So if you go to a good working win10 machine you can go to cert store or even internet option and extract the 2 certs and import them on the affected machine.. restart browser and fixed. the 2 affected certs are the R3 intermediate.. the correct one will be x1 and expire in 2025 the one causing problems expires sept29 202. The second cert is the root isrg root x1the correct one has an expiry of 6/4/2035

Re: LE Cert, Root SSL expiration, WIN7 BEWARE!!

PostPosted: Thu Sep 30, 2021 2:02 pm
by carpenox
Great post back