cancel
Showing results for 
Search instead for 
Did you mean: 
stackover
Level 7

Error exception everyday

Everyday I got the following message:

"An operation system error exception occurred with error message: Network is unreachable because the centralized updater tried to connect to host http.fpki.gov (Origin: Updater, ID: 305)"

Is there anything I can do to avoid this message?

Thank you all..

0 Kudos
9 Replies
asabban
Level 17

Re: Error exception everyday

Hello,

MWG tries to fetch CRLs from that URL for one or more of the Root CAs that are part of the SSL Scanner. The URL we try to fetch is

http://http.fpki.gov/sha1frca/sha1frca.crl

I have tried the URL and it is working perfectly fine for me. We try all of the CRL URLs on a daily basis and remove entries if we find the CRL distribution point becomes unavailable.

Can you try to open that URL manually? Is that working?

Also you could try to fetch the URL via wget on the MWG console, to see if MWG can connect to that URL.

Best,

Andre

0 Kudos
stackover
Level 7

Re: Error exception everyday

To me it works manually. It asked me to download the .crl file.

Regards,

Andre

0 Kudos
stackover
Level 7

Re: Error exception everyday

I can download the file using wget also. I really dont know why I get this error once a day.

Regards,

Andre

0 Kudos
stackover
Level 7

Re: Error exception everyday

I got the erro today again even my box can fetch the URL. Still need the answer.

thank you.

0 Kudos
McAfee Employee

Re: Error exception everyday

Did you try a wget from the Web Gateway command line?

wget http://http.fpki.gov/sha1frca/sha1frca.crl

Please understand this is not a severe error.

Best,

Jon

0 Kudos
stackover
Level 7

Re: Error exception everyday

Hi John, thank you.

As I said, I can do a wget and download the file using command line.

I know that it isn't a severe error but it is a warning indeed. I would like to get rid of this message anyway.

Thank you again,

Best

Andre

0 Kudos
stackover
Level 7

Re: Error exception everyday

Any other idea how to fix it?

Thank you guys.

Andre

0 Kudos
McAfee Employee

Re: Error exception everyday

Sorry for my previous post, didnt see the comment about wget.

I dont have any thoughts on fixing it other than to capture the issue in a tcpdump.

The error just indicates a failure to communicate, a capture will just help support that.

If you get that you will need to open a support case and also send a feedback file.

Tcpdump from the gui using the follow CLI parameters may help:

-s0 -i any host http.fpki.gov

Best,

Jon

0 Kudos
stackover
Level 7

Re: Error exception everyday

Thank you very much.

I ll do it and let you know.

Regards,

André

0 Kudos