I have a need to use the expired certficate. But the L-7 gateway is not allowing me to import the expired certificate into internal identity provider user. How can I forcefully import it?
I've just tried this against an 8.2 gateway using a certificate that expired December of last year. What error are you seeing in the Policy Manager and what version are you running? If it produces a report can you cut out the error message. By the way if you are going to use this certificate as of 7.1 you have the option on the Require SSL Certificate assertion to use a new check-box called "Check Client Certificate Validity Period" which is selected by default to ignore expired certificates just check the thumbprint when it arrives.
The policy manager I've been using is 7.1.
Thank you for the suggestion on disabling the check client certificate validity period. But I'm trying to add an expired certificate to a user in internal identity provider and getting the error message as "This certificate was expired and did not store the certificate". Is it possible to disable the expiration check while importing the certificate for a user?
Steps to reproduce the issue:
1. Create a user called testuser in internal identity provider.
2. Import an expired certificate to the testuser.
You should see exception while finishing the import.
Just tried it with the same certificate on a 7.1 Gateway and it did not fail. What error is being presented?
Here is the screenshot of error message:
I would suggest you log a case with support as we may need to get your certificate.