Nortel Networks NN46110-602 SSL messages, Checking chain invalid parent cert, Invalid root cert

Appendix C System messages 179

Action: Remove the existing static route or change the route for the remote network to be a subset or superset of the static route.

SSL messages

Checking chain: invalid parent cert, xxx

Description: The given certificate in the chain is not valid. This indicates that the certificate installed at the external LDAP server is expired or is invalid in some other way.

Action: Verify that the certificate is valid or use a certificate that you know is valid.

Checking chain: invalid child cert, xxx

Description: The given certificate in the chain is not valid. This might indicate that the certificate installed at the external LDAP server has expired or is invalid in some other way.

Action: Verify that the certificate is valid or use a certificate that you know is valid.

Child cert [xxx] not valid signature by [xxx] - xxx

Description: The given certificate in the chain is not properly signed. This error indicates that the certificate was incorrectly installed at the external LDAP server.

Action: Reinstall the certificate at the external LDAP server.

Invalid root cert, xxx

Description: One of the root certificates passed to the VPN Router during SSL negotiations was invalid.

Action: Configure the remote side to pass a valid chain of certificates to the VPN Router.

Nortel VPN Router Troubleshooting