Highlighted
Respected Contributor.
Respected Contributor.
899 views

CheckPoint Connector

Hi expert,

we are tring to integrate checkpoint logs in arcsight with this error in logs.

Any colud help?

---------------------------------

[arcsight@sgsvrsiarc015lx:/opt/arcsight/smart-connectors/sc-vec-vm-checkpoint-01/current/bin/agent/checkpoint/OPSECAD/linux]$ ./lea_client -m online -t sslca -h 10.209.3.10 -p 18184 -s CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g -f /opt/arcsight/smart-connectors/sc-vec-vm-checkpoint-02/current/user/agent/checkpoint/lea.cert.p12 -e CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g -d on

Parsed Lea Client Input Parameters

SINFO server.ip= 10.209.3.10 security_log_session=(nil) audit_log_session=(nil)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Env Configuration:

(

        :type (opsec_info)

        :lea_client0 (

                :opsec_sslca_file ("/opt/arcsight/smart-connectors/sc-vec-vm-checkpoint-02/current/user/agent/checkpoint/lea.cert.p12")

                :opsec_sic_name ("CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g")

        )

        :lea_server0 (

                :opsec_entity_sic_name ("CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g")

                :auth_type (sslca)

                :auth_port (18184)

                :ip (10.209.3.10)

        )

)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Could not find info for ...opsec_sic_name...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Could not find info for ...opsec_sslca_file...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Could not find info for ...opsec_shared_local_path...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Could not find info for ...opsec_sic_policy_file...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Could not find info for ...opsec_mt...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init: multithread safety is not initialized

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] cpprng_opsec_initialize: path is not initialized - will initialize

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] cpprng_opsec_initialize: full file name is ops_prng

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] fwprng_opsec_read_seed: could not get set out of file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] fwprng_opsec_write_seed: could not get set out of file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] fwrand_write_seed: Failed to write (opsec) seed.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_file_set_initialized: could not get set out of file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] cpprng_opsec_initialize: dev_urandom_poll returned -1

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_file_is_intialized: could not get set out of file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] cpprng_opsec_initialize: seed init for opsec failed but file was created

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sic: failed to initialize seed. Seed will be initialized later.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sic_id_internal: own sic name not defined.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_create: version 5301.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_add_name_to_group: finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_set_local_names: () names. finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_create: finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_add_name_to_group: finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_set_local_names: (local_sic_name) names. finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_add_name_to_group: finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_set_local_names: (127.0.0.1) names. finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] sslcaInitCP_Ex:no sicname

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sslca: could not initialize asym_sslca (client)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] sslcaInitCP_Ex:no sicname

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sslca: could not initialize asym_sslca_comp (client)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] sslcaInitCP_Ex:no sicname

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sslca: could not initialize asym_sslca_rc4 (client)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] sslcaInitCP_Ex:no sicname

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sslca: could not initialize asym_sslca_rc4_comp (client)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sic_id_internal: Added sic id (ctx id = 0)

MSG04 Created OPSEC environment

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sic_id: initializing from conf (sic id name: lea_client0)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sic_id: got sic name from conf: CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sic_id: got sslca file name from conf: /opt/arcsight/smart-connectors/sc-vec-vm-checkpoint-02/current/user/agent/checkpoint/lea.cert.p12

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_create: version 5301.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_add_name_to_group: finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_set_local_names: () names. finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_create: finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_add_name_to_group: finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_set_local_names: (local_sic_name) names. finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_add_name_to_group: finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_set_local_names: (127.0.0.1) names. finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_add_name_to_group: finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_policy_set_local_names: ("CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g") names. finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_apply_default_dn: ca_dn = [O=bpvmngfw.bpv.it..x5df9g].

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_apply_default_dn: calling PM_policy_DN_conversion ..

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] PM_apply_default_dn: finished successfully.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 12

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] CkpRegDir: Environment variable CPDIR is not set.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] GenerateGlobalEntry: Unable to get registry path

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 12

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 32

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 11

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 31

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 12

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] sslcaInitCP_Ex: using asym client without ca cert

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 12

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 12

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] sslcaInitCP_Ex: using asym client without ca cert

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 32

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 32

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] sslcaInitCP_Ex: using asym client without ca cert

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 11

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 11

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] sslcaInitCP_Ex: using asym client without ca cert

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 31

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] ckpSSLctx_New: prefs = 31

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_sic_id_internal: Added sic id (ctx id = 1)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_init_entity_sic: called for the client side

MSG06 Create OPSEC LEA client

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Configuring entity lea_server0

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Could not find info for ...conn_buf_size...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Could not find info for ...no_nagle...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Could not find info for ...port...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_entity_add_sic_rule: adding rules: apply_to: ME, peer: CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g, d_ip: NULL, dport 18184, svc: lea, method: sslca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_entity_add_sic_rule: adding INBOUND rule

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_entity_add_sic_rule: adding OUTBOUND rule

MSG08 Created OPSEC LEA server entity

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_get_comm: creating comm for ent=94d73e8  peer=94cca28 passive=0 key=3 info=0

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] c=0x94d73e8 s=0x94cca28 comm_type=4

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Could not find info for ...opsec_client...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_get_comm: Creating session hash (size=1)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_get_comm: ADDING comm=0x94c3ba8 to ent=0x94d73e8 with key=3

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_env_get_context_id_by_peer_sic_name: found context id=1 for peer sic name=CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_env_get_sic_handle_by_context_id: found sic handle (ctx id=1)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_sic_connect: connecting... (ctx id=1)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] resolver_gethostbyname: Performing gethostbyname for sgsvrsiarc015lx.servizi

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] peers addresses are

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] 10.209.9.35

MSG26 Called LeaStartHandler  : session( 0x94c3b38 )

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] SESSION ID:3 is sending DG_TYPE=1

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] pushing dgtype=1 len=0 to list=0x94c3bc4

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] SESSION ID:3 is sending DG_TYPE=402

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] pushing dgtype=402 len=27 to list=0x94c3bc4

MSG10 Created security log session

MSG10 Created security log session

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_get_comm: creating comm for ent=94d73e8  peer=94cca28 passive=0 key=5 info=0

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] c=0x94d73e8 s=0x94cca28 comm_type=4

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] Could not find info for ...opsec_client...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_get_comm: Creating session hash (size=1)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_get_comm: ADDING comm=0x94c39b8 to ent=0x94d73e8 with key=5

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_env_get_context_id_by_peer_sic_name: found context id=1 for peer sic name=CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_env_get_sic_handle_by_context_id: found sic handle (ctx id=1)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] opsec_sic_connect: connecting... (ctx id=1)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] peers addresses are

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] 10.209.9.35

MSG26 Called LeaStartHandler  : session( 0x94f31a8 )

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] SESSION ID:5 is sending DG_TYPE=1

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] pushing dgtype=1 len=0 to list=0x94c39d4

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] SESSION ID:5 is sending DG_TYPE=402

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] pushing dgtype=402 len=30 to list=0x94c39d4

MSG12 Created audit log session

MSG12 Created audit log session

SINFO server.ip= 10.209.3.10 security_log_session=0x94c3b38 audit_log_session=0x94f31a8

MSG13 Start OPSEC opsec_mainloop ...

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] fwasync_conn_params: <ad10923,58408> -> <ad1030a,18184>

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] fwasync_connbuf_realloc: reallocating 0 from 0 to 1028

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] fwasync_connbuf_realloc: reallocating 0 from 0 to 1028

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] fwasync_conn_params: <ad10923,53337> -> <ad1030a,18184>

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] fwasync_connbuf_realloc: reallocating 0 from 0 to 1028

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] fwasync_connbuf_realloc: reallocating 0 from 0 to 1028

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] sic_client_set_version: 16: protocol version is 59000000

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:17] sic_client_set_version: 15: protocol version is 59000000

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] call_handlers_list: no conversion done, set CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g as sic name

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] PM_session_init: given session O(CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g;CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g;18184;lea).

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] PM_policy_query: input session O(CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g;CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g;18184;lea).

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] PM_policy_query: rule found (ME;CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g;18184;lea;sslca(1/1)).

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] PM_policy_query: finished successfully. 1st method = sslca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] PM_policy_choose: finished successfully. choose: sslca.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] call_handlers_list: no conversion done, set CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g as sic name

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] PM_session_init: given session O(CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g;CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g;18184;lea).

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] PM_policy_query: input session O(CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g;CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g;18184;lea).

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] PM_policy_query: rule found (ME;CN=cp_mgmt,o=bpvmngfw.bpv.it..x5df9g;18184;lea;sslca(1/1)).

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] PM_policy_query: finished successfully. 1st method = sslca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] PM_policy_choose: finished successfully. choose: sslca.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] do_links_getver: strncmp failed. Returning -2

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_FixChain: 2 certificates

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 1

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: O=bpvmngfw.bpv.it..x5df9g

Not valid before: Tue Jun 25 13:16:06 2002 Local Time

Not valid after:  Mon Jun 20 13:16:06 2022 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyCertSign

                cRLSign

        Basic Constraint (Critical):

                is CA

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwKeyHolder:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]    Root CAs

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]             1: internal_ca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]    Certified keys

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]             1: Arcsight_lea

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    Has Private

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    Root: internal_ca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_FixChain: Found the root CA in my token

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_PrepareConnection: verify mode: 3

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] My SSL Ciphers:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] Cipher List:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] 0: DES-CBC3-SHA            SSLv3 Kx=RSA      Au=RSA  Enc=3DES(168) Mac=SHA1

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] 1: RC4-SHA                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=SHA1

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] 2: RC4-MD5                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=MD5

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep: current state = before/connect initialization

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] is_initialized: new process or forked

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwprng_get_entropy_collection_time_opsec: could not get set out of file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] cpprng_get_opsec_entropy_collection_time: entropy_collection time returned is 0

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwprng_opsec_read_seed: could not get set out of file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] rand_add_seedfile: Failed to read seed: No such file or directory

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwprng_opsec_read_seed: could not get set out of file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwrand_write_seed: Failed to read seed.: No such file or directory

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwprng_opsec_write_seed: could not get set out of file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwrand_write_seed: Failed to write (opsec) seed.: No such file or directory

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep: should retry.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_FixChain: 2 certificates

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 1

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: O=bpvmngfw.bpv.it..x5df9g

Not valid before: Tue Jun 25 13:16:06 2002 Local Time

Not valid after:  Mon Jun 20 13:16:06 2022 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyCertSign

                cRLSign

        Basic Constraint (Critical):

                is CA

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwKeyHolder:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]    Root CAs

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]             1: internal_ca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]    Certified keys

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]             1: Arcsight_lea

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    Has Private

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    Root: internal_ca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_FixChain: Found the root CA in my token

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_PrepareConnection: verify mode: 3

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] My SSL Ciphers:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] Cipher List:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] 0: DES-CBC3-SHA            SSLv3 Kx=RSA      Au=RSA  Enc=3DES(168) Mac=SHA1

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] 1: RC4-SHA                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=SHA1

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] 2: RC4-MD5                 SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=MD5

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep: current state = before/connect initialization

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep: should retry.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep: current state = SSLv3 read server hello A

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_FixChain: 2 certificates

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 1

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: O=bpvmngfw.bpv.it..x5df9g

Not valid before: Tue Jun 25 13:16:06 2002 Local Time

Not valid after:  Mon Jun 20 13:16:06 2022 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyCertSign

                cRLSign

        Basic Constraint (Critical):

                is CA

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwKeyHolder:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]    Root CAs

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]             1: internal_ca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]    Certified keys

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]             1: Arcsight_lea

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    Has Private

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    Root: internal_ca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_FixChain: Found the root CA in my token

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwValidateCert:certificate - O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] notBefore: Tue Jun 25 13:16:06 2002 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] notAfter: Mon Jun 20 13:16:06 2022 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] now:        Fri Mar 31 15:26:18 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] cert start grace period=7200   cert end grace period=0

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwValidateCert:certificate - CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] notBefore: Sat Sep 21 01:16:17 2013 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] notAfter: Fri Sep 21 01:16:17 2018 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] now:        Fri Mar 31 15:26:18 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] cert start grace period=7200   cert end grace period=0

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwValidateNameConstraints: rootCA without name constraints

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep: should retry.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep: current state = SSLv3 read server hello A

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_FixChain: 2 certificates

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 1

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: O=bpvmngfw.bpv.it..x5df9g

Not valid before: Tue Jun 25 13:16:06 2002 Local Time

Not valid after:  Mon Jun 20 13:16:06 2022 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyCertSign

                cRLSign

        Basic Constraint (Critical):

                is CA

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwKeyHolder:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]    Root CAs

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]             1: internal_ca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]    Certified keys

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]             1: Arcsight_lea

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    Has Private

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    CN=Arcsight_lea,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18]                    Root: internal_ca

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_FixChain: Found the root CA in my token

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwValidateCert:certificate - O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] notBefore: Tue Jun 25 13:16:06 2002 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] notAfter: Mon Jun 20 13:16:06 2022 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] now:        Fri Mar 31 15:26:18 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] cert start grace period=7200   cert end grace period=0

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwValidateCert:certificate - CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] notBefore: Sat Sep 21 01:16:17 2013 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] notAfter: Fri Sep 21 01:16:17 2018 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] now:        Fri Mar 31 15:26:18 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] cert start grace period=7200   cert end grace period=0

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwValidateNameConstraints: rootCA without name constraints

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep: should retry.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep: current state = SSLv3 read finished A

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep:  conncected, used TLSv1/SSLv3 ,DES-CBC3-SHA (4)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_connected: peer authenticated

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_connected: current state: SSL negotiation finished successfully

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] Certificate is:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwca_read_crl_file: failed to open file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] read_crl: failed to read mgmt crl

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwca_create_file_name: dn without organizationUnitName

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL::fwCRL - 161 revoked

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] read_crl: push crl in to cache

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] thisUpdate: Fri Mar 31 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] nextUpdate: Fri Apr 7 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] now:        Fri Mar 31 15:26:18 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] crl start grace period=600   crl end grace period=600

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking nextUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking thisUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fw_VerifySigned: unsupported algorithm

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_good_for_cert: signature verification failed: -3

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] client_send_crlreq: fetching crl failed

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_do_write: write 207 bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep: current state = SSLv3 read finished A

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_NegotiateStep:  conncected, used TLSv1/SSLv3 ,DES-CBC3-SHA (4)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_connected: peer authenticated

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_connected: current state: SSL negotiation finished successfully

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] Certificate is:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwca_read_crl_file: failed to open file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] read_crl: failed to read mgmt crl

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwca_create_file_name: dn without organizationUnitName

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL::fwCRL - 161 revoked

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] read_crl: push crl in to cache

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] thisUpdate: Fri Mar 31 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] nextUpdate: Fri Apr 7 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] now:        Fri Mar 31 15:26:18 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] crl start grace period=600   crl end grace period=600

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking nextUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking thisUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fw_VerifySigned: unsupported algorithm

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_good_for_cert: signature verification failed: -3

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] client_send_crlreq: fetching crl failed

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_do_write: write 207 bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_do_read: return should retry rc = -1

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_do_read: read 4 bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwasync_connbuf_realloc: reallocating 9508240 from 1028 to 8583

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_InputPending 1 pending bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_InputPending 1 pending bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_do_read: read 7559 bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL::fwCRL - 161 revoked

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwca_create_file_name: dn without organizationUnitName

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] sslca_put_crl: pushed crl into cache

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] thisUpdate: Fri Mar 31 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] nextUpdate: Fri Apr 7 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] now:        Fri Mar 31 15:26:18 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] crl start grace period=600   crl end grace period=600

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking nextUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking thisUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fw_VerifySigned: unsupported algorithm

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_good_for_cert: signature verification failed: -3

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwca_read_crl_file: failed to open file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] read_crl: failed to read mgmt crl

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwca_create_file_name: dn without organizationUnitName

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL::fwCRL - 161 revoked

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] read_crl: push crl in to cache

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] thisUpdate: Fri Mar 31 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] nextUpdate: Fri Apr 7 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] now:        Fri Mar 31 15:26:18 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] crl start grace period=600   crl end grace period=600

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking nextUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking thisUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fw_VerifySigned: unsupported algorithm

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_good_for_cert: signature verification failed: -3

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] sslca_check_crlreq_make_answer: fetching crl failed

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_do_write: write 64 bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_OurValCerts: validaing chain of len 2

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwValidateRevocation_e: validating using crls

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwFetchCRL_e_With_Reason: FWD_ENV is not g_env, can't use fetchers

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_ValCerts: Could not retrieve CRL.CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_do_read: read 4 bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwasync_connbuf_realloc: reallocating 9507850 from 1028 to 8583

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_InputPending 1 pending bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] validate_callback: rc = -986

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_InputPending 1 pending bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_do_read: read 7559 bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL::fwCRL - 161 revoked

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwca_create_file_name: dn without organizationUnitName

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] sslca_put_crl: pushed crl into cache

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] thisUpdate: Fri Mar 31 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] nextUpdate: Fri Apr 7 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] now:        Fri Mar 31 15:26:18 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] crl start grace period=600   crl end grace period=600

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking nextUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking thisUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fw_VerifySigned: unsupported algorithm

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_good_for_cert: signature verification failed: -3

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwca_read_crl_file: failed to open file

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] read_crl: failed to read mgmt crl

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwca_create_file_name: dn without organizationUnitName

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL::fwCRL - 161 revoked

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] read_crl: push crl in to cache

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid:

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] thisUpdate: Fri Mar 31 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] nextUpdate: Fri Apr 7 09:53:20 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] now:        Fri Mar 31 15:26:18 2017 Local Time

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] crl start grace period=600   crl end grace period=600

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking nextUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_CRLisValid: NOT checking thisUpdate

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fw_VerifySigned: unsupported algorithm

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCRL_good_for_cert: signature verification failed: -3

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] sslca_check_crlreq_make_answer: fetching crl failed

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_do_write: write 64 bytes

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_OurValCerts: validaing chain of len 2

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwValidateRevocation_e: validating using crls

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] X509 Certificate Version 3

Serial Number: 28159

Issuer: O=bpvmngfw.bpv.it..x5df9g

Subject: CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

Not valid before: Sat Sep 21 01:16:17 2013 Local Time

Not valid after:  Fri Sep 21 01:16:17 2018 Local Time

Extensions:

        Key Usage:

                digitalSignature

                keyEncipherment

        Basic Constraint:

                not CA

        CRL distribution Points:

                URI: http://bpvmngfw.bpv.it:18264/ICA_CRL0.crl

                DN: CN=ICA_CRL0,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwFetchCRL_e_With_Reason: FWD_ENV is not g_env, can't use fetchers

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwCert_ValCerts: Could not retrieve CRL.CN=cp_mgmt,O=bpvmngfw.bpv.it..x5df9g

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] sic_client_end_handler: for conn id = 16

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] opsec_auth_client_connected: connect failed (325)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] opsec_auth_client_connected: SIC Error for lea: Could not retrieve CRL.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] opsec_auth_client_connected:conn=(nil) opaque=0x94c3ae8 err=0 comm=0x94c39b8

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] comm failed to connect 0x94c39b8

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] OPSEC_SET_ERRNO: err =  8  Comm is not connected/Unable to connect (pre =  0)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] COM 0x94c39b8 got signal 131075

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] destroying comm 0x94c39b8

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] Destroying comm 0x94c39b8 with 1 active sessions

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] Destroying session (94f31a8) id 5 (ent=94d73e8) reason=SIC_FAILURE

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] SESSION ID:5 is sending DG_TYPE=3

Called LeaEndHandler

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] opsec_comm_is_needed:comm 0x94c39b8 1/1 sessions need the comm.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] pulling dgtype=1 len=0 to list=0x94c39d4

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] pulling dgtype=402 len=30 to list=0x94c39d4

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] pulling dgtype=ffffffff len=-1 to list=0x94c39d4

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] REMOVING comm=0x94c39b8 from ent=0x94d73e8 with key=5

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwasync_do_end_conn: 16: calling 0x8084ca0 to free opaque 0x94f2bf0

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_fwasync_close: start shutdown

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] validate_callback: rc = -986

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_ShutdownHandler_in_sock: called

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_ShutdownHandler: rc=0 (1) SSL negotiation finished successfully

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] sic_client_end_handler: for conn id = 15

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] opsec_auth_client_connected: connect failed (325)

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] opsec_auth_client_connected: SIC Error for lea: Could not retrieve CRL.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] opsec_auth_client_connected:conn=(nil) opaque=0x94d7058 err=0 comm=0x94c3ba8

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] comm failed to connect 0x94c3ba8

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] OPSEC_SET_ERRNO: err =  8  Comm is not connected/Unable to connect (pre =  😎

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] COM 0x94c3ba8 got signal 131075

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] destroying comm 0x94c3ba8

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] Destroying comm 0x94c3ba8 with 1 active sessions

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] Destroying session (94c3b38) id 3 (ent=94d73e8) reason=SIC_FAILURE

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] SESSION ID:3 is sending DG_TYPE=3

Called LeaEndHandler

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] opsec_comm_is_needed:comm 0x94c3ba8 1/1 sessions need the comm.

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] pulling dgtype=1 len=0 to list=0x94c3bc4

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] pulling dgtype=402 len=27 to list=0x94c3bc4

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] pulling dgtype=ffffffff len=-1 to list=0x94c3bc4

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] REMOVING comm=0x94c3ba8 from ent=0x94d73e8 with key=3

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] fwasync_do_end_conn: 15: calling 0x8084ca0 to free opaque 0x94c3cd0

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_fwasync_close: start shutdown

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_ShutdownTimeout: 0x950B398

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_Destroy: closed fd 16

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_ShutdownHandler: rc=0 (1) SSL negotiation finished successfully

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_ShutdownTimeout: 0x951D9E8

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] ckpSSL_Destroy: closed fd 15

[ 65280 4148717248]@sgsvrsiarc015lx.servizi[31 Mar 15:26:18] T_event_mainloop_e: T_event_mainloop_iter returns 0

Labels (1)
0 Likes
1 Reply
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

I really recommend reading the link for the documentation here:

There are some comments at the bottom that refer to getting the complete SIC name and how to display it correctly. Usually failure to connect and problems around connecting are focused on this - it will actively check everything! I recommend checking all of this before getting too far.

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.