This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

message relay cert issue

Hi All,

So recovering from this weeks events by building up a new AV infrastructure - yay me uhhhmmm. Us?

We are multitenanted so we use an internet facing client as an  RMS role.

I have configured the mrinit.conf file as instructed.

I ahve used that package to confgiure my RMS

I have check that the cert is accurate form the cert manager through to the endpoint (including cac file though to registry)

I have enabled verbose logging , output below

21.09.2012 18:48:23 10FC I C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Getting parent router IOR from avmr.company.co.nz:8192
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|>>> StatusReporting::StatusReporter::Done
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|DNS            : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Certification  : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Incoming       : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Outgoing       : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|<<< StatusReporting::StatusReporter::Done
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|>>> StatusReporting::StatusReporter::SetActualParent
21.09.2012 18:48:23 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Actual parent is `avmr.company.co.nz`
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|<<< StatusReporting::StatusReporter::SetActualParent
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|>>> StatusReporting::StatusReporter::Done
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|DNS            : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Certification  : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Incoming       : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Outgoing       : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|<<< StatusReporting::StatusReporter::Done
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|>>> StatusReporting::StatusReporter::Done
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|DNS            : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Certification  : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Incoming       : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Outgoing       : problem 0, changed 0, already reported 0
21.09.2012 18:48:23 10FC T C:\Program Files\Sophos\Remote Management System\RouterNT.exe|<<< StatusReporting::StatusReporter::Done
21.09.2012 18:48:23 10FC I C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Getting a new router certificate...
21.09.2012 18:48:23 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Getting the parent message router object using IOR
IOR:010000002600000049444c3a536f70686f734d6573736167696e672f4d657373616765526f757465723a312e300000000100000000000000a0000000010102000e0000003137322e31362e3136322e37360001204100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f757465720000000300000000000000080000000100c700004f415401000000140000000100c7000100010000000000090101000000000014000000080000000100a60086000220
21.09.2012 18:48:23 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Getting the certification object...
21.09.2012 18:48:23 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - Connector::connect, looking for SSLIOP connection.
21.09.2012 18:48:23 10FC E C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) Initializing SSLIOP_Endpoint
21.09.2012 18:48:23 10FC E C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - Transport_Cache_Manager::find_i, unable to locate a free connection
21.09.2012 18:48:23 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - SSLIOP_Connector::ssliop_connect, making a new connection
21.09.2012 18:48:23 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - Transport_Cache_Manager::fill_set_i, current_size = 0, cache_maximum = 10
21.09.2012 18:48:46 10FC E C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - SSL connection to <172.16.162.76:8194:8194> failed (errno: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. )
21.09.2012 18:48:46 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - Transport[9377560]::cleanup_queue_i, cleaning up complete queue
21.09.2012 18:48:46 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - Connector::connect, looking for SSLIOP connection.
21.09.2012 18:48:46 10FC E C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - Transport_Cache_Manager::find_i, unable to locate a free connection
21.09.2012 18:48:46 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - SSLIOP_Connector::ssliop_connect, making a new connection
21.09.2012 18:48:46 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - Transport_Cache_Manager::fill_set_i, current_size = 0, cache_maximum = 10
21.09.2012 18:49:09 10FC E C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - SSL connection to <172.16.162.76:8194:8194> failed (errno: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. )
21.09.2012 18:49:09 10FC D C:\Program Files\Sophos\Remote Management System\RouterNT.exe|TAO (5576|4348) - Transport[9377560]::cleanup_queue_i, cleaning up complete queue
21.09.2012 18:49:09 10FC E C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Router::GetCertificate: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO
 
21.09.2012 18:49:09 10FC E C:\Program Files\Sophos\Remote Management System\RouterNT.exe|Failed to get certificate, retrying in 600 seconds

Any Ideas  where to start?

:32037


This thread was automatically locked due to age.
Parents Reply Children
No Data