Webfilter / http proxy hangs with error "failed to read SSL certificate"

dengler · #1 (**permalink**) 06-20-2009, 03:16 PM

While activating the Webfilter via Web Security -> HTTP/S I get these errors in Livelog:

Code:

2009:06:20-14:04:30 mail httpproxy[9664]: Integrated HTTP-Proxy (c) 2007-2008 Astaro AG
2009:06:20-14:04:30 mail httpproxy[9664]: [ (nil)] main (httpproxy.c:173) reading configuration
2009:06:20-14:04:30 mail httpproxy[9664]: [ (nil)] confd_config_filter (confd-client.c:1817) failed to read SSL certificate
2009:06:20-14:04:31 mail httpproxy[9664]: [ (nil)] main (httpproxy.c:178) error reading config, exiting

If I click on Web Security -> HTTP/S -> HTTPS-CAs this error message appears:

Code:

Information:
Can't use string ("0") as a HASH ref while "strict refs" in use at /PerlApp/wfe/asg/modules/asg_http.pm line 1379.

Sidesteps:
- It is a fresh installed ASG 120, License is ok
- Firmware-Version: 7.403
- I tried to Re-generate WebAdmin Certificate with Management -> WebAdmin Settings -> HTTPS Certificate, nothing happens

Could anybody help me?

Sascha

BAlfson · #2 (**permalink**) 06-20-2009, 03:50 PM

I think the WebAdmin cert is different. Did you try to regen the Signing CA on the 'HTTPS CAs' tab?

Is this a unit that you load with a USB CDROM?

Cheers - Bob

dengler · #3 (**permalink**) 06-20-2009, 06:55 PM

1. I'm switching to "Management -> WebAdmin Settings -> HTTPS Certificate -> Re-generate WebAdmin certificate", enter the System DNS Hostname, then clicking on Apply - nothing happens. Did you mean this switch?
2. No - the unit is just a box without CDROM. The software was preinstalled, fresh out of the box.

Thanks, Sascha

BAlfson · #4 (**permalink**) 06-20-2009, 07:37 PM

1. No, not that one. 'Web Security >> HTTP/S' 'HTTPS CAs' tab.

One of the problems that people cause themselves is giving the ASG the wrong hostname. The best practice is to give it the public FQDN that resolves to its external IP. For clients who use the SMTP Proxy, we normally use a hostname of mail.domainname.com.

Cheers - Bob

dengler · #5 (**permalink**) 06-20-2009, 08:00 PM

Ok, while activating http proxy and clicking on HTTPS CAs I get the following error message:

Code:

Information:
Can't use string ("0") as a HASH ref while "strict refs" in use at /PerlApp/wfe/asg/modules/asg_http.pm line 1379.

Thanx,
Sascha

BAlfson · #6 (**permalink**) 06-20-2009, 10:07 PM

Can you show a screencap of that?

dengler · #7 (**permalink**) 06-20-2009, 11:23 PM

Sure, here is it …

BAlfson · #8 (**permalink**) 06-21-2009, 12:48 PM

It looks like a gremlin climbed into that box before they shipped it to you! I suspect there was a problem in imaging the hard drive, but since this is a new unit, that's a judgement I'd rather leave to your reseller or Astaro: https://www.astaro.com/license/open_support_case.

If you don't already have a MyAstaro account, it's free to register for one.

dengler · #9 (**permalink**) 06-21-2009, 01:13 PM

Thanks for your help Bob - I will do that.

Sascha