Commented Unassigned: Certificate is invalid, although it is not [270]

Dear WPP-Team,

we get a message on one of our WSUS maschines with WPP installed, which says the "Certificate is invalid" and we will not be able to publish updates. The certifcate indeed is valid (till 2016/1/2) since we use the same on 2 other WSUS maschines with WPP. If we try to load the certificate again, we get the message "Failed to load the certificate". Check the file. The load and import on another WPP and into Windows was successfully, so it seems not to be the certificate itself. Any thoughts or ideas?

Environment is:

OS = Windows Server 2012 R2 Standard
WSUS = 6.3.9600.16384
WPP = 1.3.1504.15
WSUS and WPP on same maschine.

I've attached the version screenshot for you.

Thanks in advance
-Andreas-


Comments: Hi Andreas, I had the same problem just right now. For short, the certificate revocation list was out of date. So I had to refresh the crl and the certificate error was solved. Background to this error: I tried first the advice to ignore certificate issues, too. And my error was gone. But this makes no sense, if you use certificates. I created a new certificate and I could not import this certificate, too. Even though I activate the setting "Ignore Code-Signing certificate validation errors". What does WPP? WPP checks the certificate with the integrated .NET function of the X509Certificate2 Object, (Verify). This function does a few checks: - datetime - chain trust - crl check For the first two checks you can easily use the microsoft mmc "Certificate" or you double click on your certificate. For the third check, you can manually open your certficate revocation list and check the validity. Hope this helps somebody. Greetings MovSiv