How do I renew the NATS ca.crt certificate

1

Environment: Segura 4.2, standalone primary appliance.

Nats error: Failed to connect: Error enabling TLS

Findings:

/etc/senhasegura/nats/.ssl/ca.crt expired on 1 October 2026.
/etc/senhasegura/nats/.ssl/server.crt is valid until 5 October 2036.
OpenSSL verification of the server certificate fails with error 10 at 1 depth lookup: certificate has expired .
Both nats-senhasegura and nats-qr-senhasegura use the same NATS SSL directory.
The system clock is synchronized.
Running orbit nats setup did not resolve the incident.

Anyone with the recovery procedure for the expired internal NATS CA, including certificate renewal and service recovery steps

2

Hi Kelvin,

Did you do the maintenance provided by segura?

it may be the issue

3

Hi,

Actually found out it was an expired root certificate that was causing the error.

4

Hi, we are experiencing the same issue. Have you managed to resolve it? If so, how?