cancel
Showing results for 
Search instead for 
Did you mean: 
RayP
Level 7

Failed to connect to host: 'http://www.ips.es/ips2002/ips2002CLASE3.crl'

Jump to solution

Hi,

We're using McAfee WebGateway 7.3.2.6.0 build 16970.

In the mwg-coordinator.errors log we keep seeing:

[2014-04-08 10:47:04.075 +02:00] [Coordinator] [UpdateProcessConnectHostFailed] Failed to connect to host: 'http://www.ips.es/ips2002/ips2002CLASE3.crl' caught exception: 'COSErrException' with errorcode: '110', message:'errno: 110 - 'Connection timed out''.   [CHTTPUpdateClient:Smiley Very HappyownloadFile]

[2014-04-08 10:50:13.835 +02:00] [Coordinator] [UpdateProcessConnectHostFailed] Failed to connect to host: 'http://www.ips.es/ips2002/ips2002CLASE3.crl' caught exception: 'COSErrException' with errorcode: '110', message:'errno: 110 - 'Connection timed out''.   [CHTTPUpdateClient:Smiley Very HappyownloadFile]

Is this a known problem/bug or has the host http://www.ips.es a problem?

Regards,

Ray

0 Kudos
1 Solution

Accepted Solutions
asabban
Level 17

Re: Failed to connect to host: 'http://www.ips.es/ips2002/ips2002CLASE3.crl'

Jump to solution

Hello,

MWG is unable to download the CRL from that host. Actually www.ips.es is dead since a long time and we have removed the CA as it has been disabled by the browser vendors as well. When you still see this error message this could have two reasons:

1.) You are not using the McAfee Maintained RootCA  list, e.g. the list of RootCAs that automatically updates, but have a static list in place. In that case you need to manually remove this CA:

Subject
Common Name (CN)IPS CA Chained CAs Certification Authority
Organization (O)ips@mail.ips.es C.I.F. B-60929452
Organizational Unit (OU)IPS CA Chained CAs Certification Authority

2.) If you have the Maintained RootCA list the CA is already removed, but MWG needs to be restarted.

Best,

Andre

0 Kudos
2 Replies
asabban
Level 17

Re: Failed to connect to host: 'http://www.ips.es/ips2002/ips2002CLASE3.crl'

Jump to solution

Hello,

MWG is unable to download the CRL from that host. Actually www.ips.es is dead since a long time and we have removed the CA as it has been disabled by the browser vendors as well. When you still see this error message this could have two reasons:

1.) You are not using the McAfee Maintained RootCA  list, e.g. the list of RootCAs that automatically updates, but have a static list in place. In that case you need to manually remove this CA:

Subject
Common Name (CN)IPS CA Chained CAs Certification Authority
Organization (O)ips@mail.ips.es C.I.F. B-60929452
Organizational Unit (OU)IPS CA Chained CAs Certification Authority

2.) If you have the Maintained RootCA list the CA is already removed, but MWG needs to be restarted.

Best,

Andre

0 Kudos
RayP
Level 7

Re: Failed to connect to host: 'http://www.ips.es/ips2002/ips2002CLASE3.crl'

Jump to solution

Thanks Andre, the error message is gone.

0 Kudos