cancel
Showing results for 
Search instead for 
Did you mean: 
mhallam
Level 7

MWG 7.4.2 m- certificate chain filter can not be loaded

I have an issue where every day I get a warning "15 of the recently updated CRLs for the certificate chain filter can not be loaded." I have seen all the posts for deleting the expired certs. I cannot seem to delete the bad certs. I do not appear to have the option to delete. I did however delete the Known CAs (McAfee maintained) list and still got the same message. any ideas on how to solve this issue?

Thanks,

0 Kudos
19 Replies
exbrit
Level 21

Re: MWG 7.4.2 m- certificate chain filter can not be loaded

Moved to Web Gateway for better support, hopefully.

0 Kudos
yuems
Level 11

Re: MWG 7.4.2 m- certificate chain filter can not be loaded

First select Troubleshooting top level menu and then choose an appliance (contain error).

Open appliance tree and select Log Files.

Find "mwg-errors" directory. Double-click the folder to display its log files.

Find "mwg-coordinator.errors" log file. Download it.

Then search "Failed to download file" words.

If you send logs us, Maybe we can help.

0 Kudos
mhallam
Level 7

Re: MWG 7.4.2 m- certificate chain filter can not be loaded

[2014-09-14 09:17:10.827 -05:00] [Coordinator] [UpdateProcessDownloadFailedBadCode] Failed to download file: 'rootrepository/CRL.crl', while host: 'repository.secomtrust.net' sent back HTTP-Code: '404'.   [CHTTPUpdateClient:Smiley Very HappyownloadFile]

[2014-09-14 09:17:11.198 -05:00] [Coordinator] [UpdateProcessDownloadFailedBadCode] Failed to download file: 'rootrepository/CRL.crl', while host: 'repository.secomtrust.net' sent back HTTP-Code: '404'.   [CHTTPUpdateClient:Smiley Very HappyownloadFile]

[2014-09-14 09:17:11.198 -05:00] [Coordinator] [UpdateProcessDownloadFileFailed] Failed to download file: 'rootrepository/CRL.crl'.   [CClusterUpdater:Smiley Very HappyownloadUpdateFiles]

[2014-09-14 09:17:12.548 -05:00] [Coordinator] [UpdateProcessFileMissing] File: 'e5df743cb601c49b9843dcab8ce86a81109fe48e_1' is missing.   [CUpdateUtils::CreateDirectFilterUpdateMessage]

[2014-09-14 09:17:12.549 -05:00] [Coordinator] [UpdateProcessFileMissing] File: 'e5df743cb601c49b9843dcab8ce86a81109fe48e_1' is missing.   [CUpdateUtils::CreateDirectFilterUpdateMessage]

[2014-09-14 09:17:12.564 -05:00] [Coordinator] [UpdateProcessFileMissing] File: 'e5df743cb601c49b9843dcab8ce86a81109fe48e_1' is missing.   [CUpdateUtils::CreateDirectFilterUpdateMessage]

0 Kudos
yuems
Level 11

Re: MWG 7.4.2 m- certificate chain filter can not be loaded

May you post scr-cap of your Certificate aouthority list under the Policy > Lists

0 Kudos
mhallam
Level 7

Re: MWG 7.4.2 m- certificate chain filter can not be loaded

0 Kudos
yuems
Level 11

Re: MWG 7.4.2 m- certificate chain filter can not be loaded

Sorry we must to see list of CAs. When you choose Known CAs I think a list opened right frame.

0 Kudos
mhallam
Level 7

Re: Re: MWG 7.4.2 m- certificate chain filter can not be loaded

There are 379 of them... see attached.

0 Kudos
yuems
Level 11

Re: Re: Re: MWG 7.4.2 m- certificate chain filter can not be loaded

Ok,
If you chek the rootrepository/CRL.crl link (http://repository.secomtrust.net/rootrepository/CRL.crl) it'n not a valid link.

   

67ValiCert, Inc. - http://www.valicert.com/http://repository.secomtrust.net/rootrepository/CRL.crl
144SECOM Trust.net - Security Communication RootCA1http://repository.secomtrust.net/SC-Root1/SCRoot1CRL.crl
164SECOM Trust Systems CO.,LTD. - Security Communication EV RootCA1http://repository.secomtrust.net/EV-Root1/EVRoot1CRL.crl
244SECOM Trust Systems CO.,LTD. - Security Communication EV RootCA1http://repository.secomtrust.net/EV-Root1/EVRoot1CRL.crl
0 Kudos
mhallam
Level 7

Re: MWG 7.4.2 m- certificate chain filter can not be loaded

OK, now how do I get rid of them? I see no way of deleting them from the list.

0 Kudos