CA certificate for SSL scan import error

[vvadim]

Hi All!

we have the WG v.10.0.3 (35348) appliance in Central Management with SSL Scan option enabled on it.

The CA certificate will expire soon, so we have generated the new one according to KB75037, convert it to the .pfx, and import to WG in a new ruleset with replacing Default CA to test .

Everything gone fine, but when I trying to save changes next error message appears:

Spoiler

Save changes failed.

Some appliances reported errors:
CORE: Proxy: com.scur.engine.sslclientcontext (2 Nodes)

Stack trace: com.scur.k.shared.exceptions.KClientServerException: Overall Status "STATUS_ERROR_ROLLBACK":rollback performed
Node "--------------------------" reports STATUS_ERROR_ROLLBACK:
CORE: Proxy: com.scur.engine.sslclientcontext
Node "--------------------------" reports STATUS_ERROR_ROLLBACK:
CORE: Proxy: com.scur.engine.sslclientcontext

at com.scur.k.app.communication.ServerRequest.callServerFunction(ServerRequest.java:269)
at com.scur.k.app.communication.ServerRequest.callServerFunction(ServerRequest.java:236)
at com.scur.k.app.communication.ServerRequest.saveChangesAndResetModifiedFlags(ServerRequest.java:939)
at com.scur.k.Globals$3.doInBackground(Globals.java:400)
at com.scur.k.Globals$3.doInBackground(Globals.java:391)
at javax.swing.SwingWorker$1.call(Unknown Source)
at java.util.concurrent.FutureTask.run(Unknown Source)
at javax.swing.SwingWorker.run(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Caused by: com.scur.k.shared.exceptions.KCoordinatorNodeException: Overall Status "STATUS_ERROR_ROLLBACK":rollback performed
Node "--------------------------" reports STATUS_ERROR_ROLLBACK:
CORE: Proxy: com.scur.engine.sslclientcontext
Node "--------------------------" reports STATUS_ERROR_ROLLBACK:
CORE: Proxy: com.scur.engine.sslclientcontext

at com.scur.k.server.ww.adapter.AdapterUtils.analyzeResponse(AdapterUtils.java:270)
at com.scur.k.server.ww.adapter.AbstractAdapter.fromCoordinator(AbstractAdapter.java:97)
at com.scur.k.server.ww.adapter.AbstractAdapter.send(AbstractAdapter.java:191)
at com.scur.k.server.ww.WwCommunicationManager.saveObjectsToKommunicator(WwCommunicationManager.java:315)
at com.scur.k.server.data.storage.CoordinatorStorageHandler.saveChanges(CoordinatorStorageHandler.java:703)
at com.scur.k.server.data.DataSaver.saveChanges(DataSaver.java:434)
at com.scur.k.server.Konfigurator.saveChanges(Konfigurator.java:349)
at com.scur.k.server.Konfigurator.saveChanges(Konfigurator.java:337)
at com.scur.k.server.ServerFunctionHandler.handleSaving(ServerFunctionHandler.java:608)
at com.scur.k.server.ServerFunctionHandler.processServerFunction(ServerFunctionHandler.java:159)
at com.scur.k.server.Request.doPost(Request.java:120)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:647)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
at com.scur.k.server.filter.AuthenticationFilter.handleNeedsAuthentication(AuthenticationFilter.java:130)
at com.scur.k.server.filter.AuthenticationFilter.doFilterHttpServet(AuthenticationFilter.java:82)
at com.scur.k.server.filter.AuthenticationFilter.doFilter(AuthenticationFilter.java:69)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
at com.scur.k.server.filter.CertificateAuthenticationFilter.doFilterHttpServlet(CertificateAuthenticationFilter.java:75)
at com.scur.k.server.filter.CertificateAuthenticationFilter.doFilter(CertificateAuthenticationFilter.java:45)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
at com.scur.k.server.filter.SetHeaderFilter.doFilter(SetHeaderFilter.java:83)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
at com.scur.k.server.filter.SetHeaderFilter.doFilter(SetHeaderFilter.java:83)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:110)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:492)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:165)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:104)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:452)
at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1201)
at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:654)
at org.apache.tomcat.util.net.AprEndpoint$SocketWithOptionsProcessor.run(AprEndpoint.java:2469)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
at java.lang.Thread.run(Thread.java:748)

What Am I doing wrong?

Thanks

[fdurur]

Hi, 

please open a case with Technical Support.

regards

f.