Pages

Friday, 18 October 2019

[SOLVED] java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date

PROBLEM
when validating digital certificates using ocsp get error
java.security.cert.CertPathValidatorException: Response is unreliable: its validity interval is out-of-date
CAUSE

the time on the client and server is not appropriate ... 
SOLVED
fix the time on the client or server with the correct time
EXAMPLE

at 19 Oct 2019 00:49, the client checks OCSP to the OCSP server and the response is 👇


CSP response:
Response Status: SUCCESS
Responder ID: byKey: 86AFCABDF4F169C1AAC9D78E98F2B029E3196645
Produced: Saturday 19 October 00:30:53 WIB 2019
1 response:
SingleResponse:
CertId
Algorithm: SHA-1
issuerNameHash
0000: 9C 46 39 8F C4 67 DC C5 77 58 E9 F1 F4 11 BC F9. F9..g..wX ......
0010: 11 14 E2 0E
issuerKeyHash:
0000: 86 AF CA BD F4 F1 69 C1 AA C9 D7 8E 98 F2 B0 29 ...... i ........)
0010: E3 19 66 45
SerialNumber: [2dbc67be 3bac5c48]
CertStatus: OK
This update is Saturday October 19 00:30:53 WIB 2019



there is a time difference between client and server



No comments:

Post a Comment