This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Proxy does not work with certificte in P12-format & password

If I use a certificate in the p12 format and provide a password, admin- & userportal is working properly with with this certificate, but the web proxy is blocking any traffic because the service is not running at all.

 

# service awarrenhttp:restart -ds nosync
503 Service Failed

# tail /var/tslog/awarrenhttp.log
1536236309.582272454 [24960/ (nil)] awarrenhttp.c:378 main ------------------------------------------------------------------
1536236309.582275455 [24960/ (nil)] awarrenhttp.c:379 main Starting ...
1536236309.582298233 [24960/ (nil)] awarrenhttp.c:404 main reading configuration
1536236309.582301449 [24960/ (nil)] config.c:378 config_init called
1536236309.759847260 [24960/ (nil)] config-parse.c:511 cfg_read_http_ini Key file contains key 'ssl_portalkey_password' which has a value that cannot be interpreted.
1536236309.759901998 [24960/ (nil)] awarrenhttp.c:406 main error reading config, exiting

 

If I use the same Certificate with 'pem' & unecrypted '.key' file everything is working.



This thread was automatically locked due to age.
Parents Reply
  • As I was successful with pem & unencrypted key file, I have no other testet solution.

    But as I understand sophos support, the bug is triggered by either certificate name, or most likely a passphrase with special chars in it, given the error of the web-proxy is

    cfg_read_http_ini Key file contains key 'ssl_portalkey_password' which has a value that cannot be interpreted.

    So, try to use a passphrase without special characters, or convert your certificate to pem format with an unencrypted key file.

Children
No Data