[记录]ipmi SSl 过期临时解决方法

houzai 2026-08-24 10:06 1

错误日志


2026.08.23 21:58:04 LOG7[2036:3308]: New thread created
2026.08.23 21:58:04 LOG7[2036:2648]: Service [ikvm] started
2026.08.23 21:58:04 LOG5[2036:2648]: Service [ikvm] accepted connection from 127.0.0.1:51402
2026.08.23 21:58:04 LOG6[2036:2648]: connect_blocking: connecting 23.95.xxx.xxx:5900
2026.08.23 21:58:04 LOG7[2036:2648]: connect_blocking: s_poll_wait 23.95.xxx.xxx:5900: waiting 10 seconds
2026.08.23 21:58:04 LOG5[2036:2648]: connect_blocking: connected 23.95.xxx.xxx:5900
2026.08.23 21:58:04 LOG5[2036:2648]: Service [ikvm] connected remote server from 107.174.xx.xx:51403
2026.08.23 21:58:04 LOG7[2036:2648]: Remote socket (FD=420) initialized
2026.08.23 21:58:04 LOG7[2036:2648]: SNI: sending servername: 23.95.xxx.xxx
2026.08.23 21:58:04 LOG7[2036:2648]: SSL state (connect): before/connect initialization
2026.08.23 21:58:04 LOG7[2036:2648]: SSL state (connect): SSLv3 write client hello A
2026.08.23 21:58:05 LOG7[2036:2648]: SSL state (connect): SSLv3 read server hello A
2026.08.23 21:58:05 LOG7[2036:2648]: Starting certificate verification: depth=0, /C=US/ST=California/L=San Jose/O=Super Micro Computer/OU=Software/CN=IPMI/emailAddress=Email
2026.08.23 21:58:05 LOG4[2036:2648]: CERT: Verification error: certificate has expired
2026.08.23 21:58:05 LOG4[2036:2648]: Certificate check failed: depth=0, /C=US/ST=California/L=San Jose/O=Super Micro Computer/OU=Software/CN=IPMI/emailAddress=Email
2026.08.23 21:58:05 LOG7[2036:2648]: SSL alert (write): fatal: certificate expired
2026.08.23 21:58:05 LOG3[2036:2648]: SSL_connect: 14090086: error:14090086 routines:SSL3_GET_SERVER_CERTIFICATE verify failed
2026.08.23 21:58:05 LOG5[2036:2648]: Connection reset: 0 byte(s) sent to SSL, 0 byte(s) sent to socket
2026.08.23 21:58:05 LOG7[2036:2648]: Remote socket (FD=420) closed
2026.08.23 21:58:05 LOG7[2036:2648]: Local socket (FD=388) closed
2026.08.23 21:58:05 LOG7[2036:2648]: Service [ikvm] finished (0 left)
2026.08.23 21:58:06 LOG7[2036:3308]: Service [ikvm] accepted (FD=408) from 127.0.0.1:51404


解决方法

将本地电脑系统时间和ipmi时间到2023年 并保持一致


最新回复 (5)
  • hugedick 08-24 10:14
    1

    厉害了,这是个不错的思路。


    另外,楼主有没有尝试过这个:

    https://github.com/solarkennedy/ipmi-kvm-docker

  • houzai 楼主 08-24 10:23
    2

    @hugedick #1


    这个docker镜像会面临同样的问题

    目前的问题是更新了 ipmi ssl 并不会更新5900 是两个不同的证书?certificate has expired

  • guboysky 08-24 10:24
    3

    @hugedick #1 我试过了,CCS 一样打开不了,最后工单让客服升级bios固件 就解决了!

  • hugedick 08-24 10:26
    4

    @houzai #2 发布于2026/8/24 10:23:37

    @hugedick #1


    这个docker镜像会面临同样的问题

    目前的问题是更新了 ipmi ssl 并不会更新5900 是两个不同的证书?certificate has expired


    @guboysky #3 发布于2026/8/24 10:24:22

    @hugedick #1 我试过了,CCS 一样打开不了,最后工单让客服升级bios固件 就解决了!


    多谢两位!看来老机器真折腾呐。

  • houzai 楼主 08-24 10:27
    5

    @guboysky #3

    我尝试过 REDFISH_X10_388_20200221_unsigned 应该不是升级固件问题

    Firmware Revision: 03.88

    如果可以你问问他们到底做了什么。。

* 帖子来源NodeSeek
返回