Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 7 replies
  • Subscribers 0 subscribers
  • Views 1849 views
  • Users 0 members are here
Options
Suggested

[7.950][BUG][CLOSED] unable to get local issuer certificate

wingman
Hi All

I am getting the following blocked request and I was wondering what the issue is: 

 2010:06:19-00:15:20 ***** httpproxy[14883]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="CONNECT" srcip="192.168.*.*" dstip="94.245.120.188" user="" statuscode="403" cached="0" profile="REF_gTJkfSrJvf (AD Users)" filteraction="REF_PAZIrYpGAv (Local Users)" size="6350" time="612 ms" request="0xe9a5fce8" url="urs.microsoft.com/" exceptions="av" error="unable to get local issuer certificate" 


Thanks
Parents
  • 0
    I am using standard mode with double AV protection,HTTPS scanning enabled and no ipv6. 
    Definitely something stanged as I can now browse to the URl and I getting the following errors(please notice that the destination is different-probably using load balancing): 

    2010:06:20-10:44:01 ** httpproxy[14883]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe9a9fb98" function="send_request_headers" file="request.c" line="171" message="write: Connection timed out"

    2010:06:20-10:44:01 **** httpproxy[14883]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.*.*" dstip="213.199.177.156" user="" statuscode="502" cached="0" profile="REF_gTJkfSrJvf (AD Users)" filteraction="REF_PAZIrYpGAv (Local Users)" size="4565" time="42000 ms" request="0xe9a9fb98" url="urs.microsoft.com/" exceptions="av" error="Connection timed out" country="Ireland"


    If I try to connect to 94.245.120.188, I am getting the option to (Add exception for this URL) as the status is unable to get local issuer certificate


     
    2010:06:20-10:48:27 **** httpproxy[14883]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.*.*" dstip="94.245.120.188" user="" statuscode="403" cached="0" profile="REF_gTJkfSrJvf (AD Users)" filteraction="REF_PAZIrYpGAv (Local Users)" size="6353" time="229 ms" request="0xe9a8d4b0" url="94.245.120.188/" exceptions="" error="unable to get local issuer certificate" country="United Kingdom"

    2010:06:20-10:48:28 **** httpproxy[14883]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.*.*" dstip="94.245.120.188" user="" statuscode="403" cached="0" profile="REF_gTJkfSrJvf (AD Users)" filteraction="REF_PAZIrYpGAv (Local Users)" size="6386" time="236 ms" request="0xe9ab8900" url="94.245.120.188/favicon.ico" exceptions="" error="unable to get local issuer certificate" country="United Kingdom"



    Trying to add the exception prompts me for my HTTP credentials (Bear in mind that I am using standard mode!!)-pic attached.Using my username and password for logging to the GUI (as I don't have any other form of Authentication enabled-I have AD setting in place I am just not using them ), returns an error (pic attached)

    Hope that helps!


    Thanks
Reply
  • 0
    I am using standard mode with double AV protection,HTTPS scanning enabled and no ipv6. 
    Definitely something stanged as I can now browse to the URl and I getting the following errors(please notice that the destination is different-probably using load balancing): 

    2010:06:20-10:44:01 ** httpproxy[14883]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xe9a9fb98" function="send_request_headers" file="request.c" line="171" message="write: Connection timed out"

    2010:06:20-10:44:01 **** httpproxy[14883]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.*.*" dstip="213.199.177.156" user="" statuscode="502" cached="0" profile="REF_gTJkfSrJvf (AD Users)" filteraction="REF_PAZIrYpGAv (Local Users)" size="4565" time="42000 ms" request="0xe9a9fb98" url="urs.microsoft.com/" exceptions="av" error="Connection timed out" country="Ireland"


    If I try to connect to 94.245.120.188, I am getting the option to (Add exception for this URL) as the status is unable to get local issuer certificate


     
    2010:06:20-10:48:27 **** httpproxy[14883]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.*.*" dstip="94.245.120.188" user="" statuscode="403" cached="0" profile="REF_gTJkfSrJvf (AD Users)" filteraction="REF_PAZIrYpGAv (Local Users)" size="6353" time="229 ms" request="0xe9a8d4b0" url="94.245.120.188/" exceptions="" error="unable to get local issuer certificate" country="United Kingdom"

    2010:06:20-10:48:28 **** httpproxy[14883]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.*.*" dstip="94.245.120.188" user="" statuscode="403" cached="0" profile="REF_gTJkfSrJvf (AD Users)" filteraction="REF_PAZIrYpGAv (Local Users)" size="6386" time="236 ms" request="0xe9ab8900" url="94.245.120.188/favicon.ico" exceptions="" error="unable to get local issuer certificate" country="United Kingdom"



    Trying to add the exception prompts me for my HTTP credentials (Bear in mind that I am using standard mode!!)-pic attached.Using my username and password for logging to the GUI (as I don't have any other form of Authentication enabled-I have AD setting in place I am just not using them ), returns an error (pic attached)

    Hope that helps!


    Thanks
Children
No Data
Unfiltered HTML