# Consul connect ca issue

**URL:** <https://discuss.hashicorp.com/t/consul-connect-ca-issue/63668>\
**Category:** Consul\
**Created:** [March 14, 2024, 9:24am UTC](https://discuss.hashicorp.com/t/consul-connect-ca-issue/63668 "2024-03-14T09:24:04Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![BeckYeh](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/beckyeh/32/40801_2.png) [@BeckYeh](https://discuss.hashicorp.com/u/BeckYeh)\
**Post date:** [March 14, 2024, 9:24am UTC](https://discuss.hashicorp.com/t/consul-connect-ca-issue/63668/1 "2024-03-14T09:24:05Z")

</div>

I face an supper strange issue about

2024-03-14T09:14:00.143702+00:00 ip-172-25-18-14 consul[2581957]: 2024-03-14T09:14:00.143Z [ERROR] agent.auto\_config: AutoEncrypt.Sign RPC failed: addr=172.25.13.11:8300 error=“rpcinsecure: error making call: error generating certificate: x509: provided PrivateKey doesn’t match parent’s PublicKey”

and

if I want to reset

# consul connect ca set-config -config-file payload.json

Error setting CA configuration: Unexpected response code: 500 (Error updating secondary datacenter CA config: Failed to set the intermediate certificate with the CA provider: could not verify intermediate cert against root: x509: certificate has expired or is not yet valid: current time 2024-03-14T09:09:44Z is before 2024-03-14T09:10:50Z)

looks like the intermediate expired, but I can’t renew it, how do I fix it ?

---

<div class="post-metadata">

**Author:** ![brucelok](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/brucelok/32/40570_2.png) [@brucelok](https://discuss.hashicorp.com/u/brucelok)\
**Post date:** [March 15, 2024, 1:26am UTC](https://discuss.hashicorp.com/t/consul-connect-ca-issue/63668/2 "2024-03-15T01:26:24Z")

</div>

I suggest to focus on the first problem as you likely provided a wrong private key when you tried to generate new cert.

---

<div class="post-metadata">

**Author:** ![BeckYeh](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/beckyeh/32/40801_2.png) [@BeckYeh](https://discuss.hashicorp.com/u/BeckYeh)\
**Post date:** [March 15, 2024, 1:40am UTC](https://discuss.hashicorp.com/t/consul-connect-ca-issue/63668/3 "2024-03-15T01:40:45Z")

</div>

> [@BeckYeh](#):
>
> AutoEncrypt

the key is auto\_encrypt genernal by consul self