This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Purging expired certs from Sophos XG

JohnHilton over 2 years ago

Hi all,

having a few issues with expired certs that are on the XG. (Google namly)

I have deleted the certs from the XG using putty ssh in /var/certcache/

I am now having other domain with the same error (xg thinks the cert is expired when it isn't)

can i just purge the whole contents of the /var/certcache/ folder? does it just contain certs?

Can't this be dont via the GUI? disable expired certs as a button? why isn't this happening seemlessly?

Thanks

This thread was automatically locked due to age.

Top Replies

Vivek Jagad over 2 years ago +1 suggested

Hello JohnHilton , Thank you for reaching out to the community, you can purge a cert from the directory /var/certcache/ Upon accessing the site again it will gen a cert once again...

0 Vivek Jagad over 2 years ago

Hello JohnHilton,

Thank you for reaching out to the community, you can purge a cert from the directory /var/certcache/
Upon accessing the site again it will gen a cert once again...

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 JohnHilton over 2 years ago in reply to Vivek Jagad

can i just purgte the whole folder? are there only certs in that directory?

so i can just "rm * " once in that directory?

this a bug?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to JohnHilton

No not a bug, and will not recommend, better open a support investigation with Sophos Support !!

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 JohnHilton over 2 years ago in reply to Vivek Jagad

Sophos had to remote in an fix this for me as all the expired certs hadn't updated/been removed. As you say. there's a fix for this in the next release.
Cancel
Vote Up 0 Vote Down

Cancel
+1 Vivek Jagad over 2 years ago in reply to JohnHilton

You can raise a service request with the Sophos support and they will further provide the next plan of action !!
certcache is not updating is bug [NC-100078/NC-100265] reported in v19.0 - will be fixed in SFOS 19.0.2 MR2 !!

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel