Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

CA SSL key password reset to default after update to SFOS 16.05.6 MR-6

Hi,

after the firmware update to SFOS 16.05.6 MR-6 several services were unable to start. The list of dead services is as follows:

- SMTPD

- MTA

- WebProxy

- POPIMAPDaemon  

 

When I was checking log files for any hint that might lead me to the source of the problem I noticed all the log files of dead services contained this error message

" reading private key '/conf/certificate/caprivate/SecurityAppliance_SSL_CA.key' failed for 'error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt'"

Then I checked timestamp for the their configuration files

/cfs/proxy/http/awarrenhttp.conf
/cfs/proxy/smtp/conf/mta.conf
/cfs/proxy/smtp/conf/smtp.conf
/cfs/proxy/warren/conf/policy.conf

and it was changed. I looked inside to confirm my suspicion and the CA ssl key password was really reset to default.

I wonder, is there any way I can revert these changes back to my non-default password I set for CA ssl key before?

Changing password via

System->Certificates->Certificate Authorities->Default->Edit 

is not an option. 

Thank you in advance.



This thread was automatically locked due to age.