Bug ID 1000965: Mac Machine Cert Check fails if certificate is expired and a valid certificate exists

Last Modified: Apr 28, 2025

Affected Product(s):
APM-Clients APM(all modules)

Known Affected Versions:
7.1.8.3, 7.1.8.4, 7.1.8.5, 7.1.9, 7.1.9.7, 7.1.9.8, 7.1.9.9, 7.2.1, 7.2.1.1, 7.2.1.2, 7.2.1.3

Fixed In:
7.2.2, 7.2.1.4

Opened: Mar 10, 2021

Severity: 3-Major

Symptoms

The machine cert check uses an expired certificate in its check and the check fails. 'session.check_machinecert./Common/mac_machinecertcheck_act_machinecert_auth_ag.error_message' set to ' X509_verify_cert failed: error #: 10 at depth 0, error message:certificate has expired '

Impact

The Mac machine cert check fails.

Conditions

-- An expired and a valid certificate both have the same name. -- Configurations using Mac Edge Client.

Workaround

Delete the expired certificate. To locate and delete expired certificates: 1. From the Finder, click Go :: Utilities :: KeyChain Access. 2. In the left pane, click System. It lists all the certificates. 3. Check the expiration dates listed to the right. 5. Click on the certificate that you want to delete. 6. In the menu bar, click Edit :: Delete.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips