The renewal of your Heartbeat intermediate certificate has failed

Question

My HA XGS136 cluster is experiencing this issue with heartbeats: 
 I get an error alert in Sophos Central 
 The renewal of your Heartbeat intermediate certificate has failed 
 
 Looking in the heartbeat log I can see failures. 
 tail /var/tslog/heartbeatd.log 
 [2022-07-26 09:29:19.037Z] INFO HBSessionHandler.cpp[13825]:125 removeDirtySessions - Number of sessions: 0 [2022-07-26 09:29:19.046Z] WARN HBSession.cpp[13825]:344 bufferDisconnectEvent - Incoming connection from 10.50.0.196 failed. SSL error: SSL routines:ssl3_read_bytes sslv3 alert certificate expired [2022-07-26 09:29:21.196Z] INFO HBSessionHandler.cpp[13825]:125 removeDirtySessions - Number of sessions: 0 [2022-07-26 09:29:21.209Z] WARN HBSession.cpp[13825]:344 bufferDisconnectEvent - Incoming connection from 172.16.20.21 failed. SSL error: SSL routines:ssl3_read_bytes sslv3 alert certificate expired XGS136_XN01_SFOS 19.0.1 MR-1-Build350# tail /var/tslog/heartbeatd.log [2022-07-26 09:28:39.565Z] INFO HBSessionHandler.cpp[13825]:125 removeDirtySessions - Number of sessions: 0 [2022-07-26 09:28:39.578Z] WARN HBSession.cpp[13825]:344 bufferDisconnectEvent - Incoming connection from 172.16.21.118 failed. SSL error: SSL routines:ssl3_read_bytes sslv3 alert certificate expired [2022-07-26 09:29:04.287Z] INFO HBSessionHandler.cpp[13825]:125 removeDirtySessions - Number of sessions: 0 [2022-07-26 09:29:04.297Z] WARN HBSession.cpp[13825]:344 bufferDisconnectEvent - Incoming connection from 10.50.0.5 failed. SSL error: SSL routines:ssl3_read_bytes sslv3 alert certificate expired [2022-07-26 09:29:15.153Z] INFO HBSessionHandler.cpp[13825]:125 removeDirtySessions - Number of sessions: 0 [2022-07-26 09:29:15.163Z] WARN HBSession.cpp[13825]:344 bufferDisconnectEvent - Incoming connection from 172.16.20.230 failed. SSL error: SSL routines:ssl3_read_bytes sslv3 alert certificate expired [2022-07-26 09:29:19.037Z] INFO HBSessionHandler.cpp[13825]:125 removeDirtySessions - Number of sessions: 0 [2022-07-26 09:29:19.046Z] WARN HBSession.cpp[13825]:344 bufferDisconnectEvent - Incoming connection from 10.50.0.196 failed. SSL error: SSL routines:ssl3_read_bytes sslv3 alert certificate expired [2022-07-26 09:29:21.196Z] INFO HBSessionHandler.cpp[13825]:125 removeDirtySessions - Number of sessions: 0 [2022-07-26 09:29:21.209Z] WARN HBSession.cpp[13825]:344 bufferDisconnectEvent - Incoming connection from 172.16.20.21 failed. SSL error: SSL routines:ssl3_read_bytes sslv3 alert certificate expired 
 
 What are the rectification steps here?

emmosophos · Answer

Hello there, 
 Thank you for contacting the Sophos Community. 
 Did you do an additional reboot, once you ended up on v19 MR1? 
 If not, try doing it, if the issue persists try to de-register and re-register the Firewalls from Central. 
 Regards,

Vivek Jagad · Answer

Hello ScHwAnG86 , Thank you for reaching out to the community, for the reported issue please refer the following useful KBA below: > Expiring Sophos Central Heartbeat Certificates: https://support.sophos.com/support/s/article/KB-000037006?language=en_US

Vivek Jagad · Answer

So ScHwAnG86 this cert does not seems to be filled properly if this was filled properly then you may not have faced the issue at the first place and your issue might have resolved with upgrade !! I suggest fill out the cert, and then regenerate the ssl ca and appliances cert, you are good to go !!

The renewal of your Heartbeat intermediate certificate has failed

Top Replies

Submitted a Tech Support Case lately from the Support Portal?