The provided SSL certificate is expired

MongoDB Percona Operator for MongoDB
1

If you get the following error

2021-05-24T20:06:18.957+0000 I  CONTROL  [main] Automatically disabling TLS 1.0, to force-enable TLS 1.0 specify --sslDisabledProtocols 'none'
2021-05-24T20:06:18.960+0000 F  NETWORK  [main] The provided SSL certificate is expired or not yet valid.
2021-05-24T20:06:18.960+0000 F  -        [main] Fatal Assertion 28652 at src/mongo/util/net/ssl_manager_openssl.cpp 1161
2021-05-24T20:06:18.960+0000 F  -        [main] \n\n***aborting after fassert() failure\n\n

Then you can delete the following secrets:

*cluster_name*-ssl
*cluster_name*-ssl-internal

And maybe deleting all the pods will help!

1 Like
2

@pierreozoux thanks for sharing that. Are you asking what is the correct way to rotate the cert?
By default our cert is valid till Dec 31 23:59:59 9999 GMT. Are you using something custom?

1 Like
3

I don’t know what happened, I have several mongo instances, and it never happened.
I found this solution, but I’m not sure what was the problem, and as I was the first one, I thought I’d comment here for my future self :slight_smile:

1 Like
4

This is my question, I’d like to provide SSL certificate manually, and what is the correct way to rotate the cert?

1 Like