Re: Root CA let's encrypt and SSL inspection [message #150833 is a reply to message #150828] |
Thu, 13 January 2022 13:39   |
kimiko1086
Messages: 9 Registered: March 2018
|
|
|
|
To resolve the issue, kindly update the CA certificates on the Kerio Control side by following the below steps:
Download the attached ca_bundle.tgz file (or from this link). You can extract the content and verify that's just PEM .crt files in the Mozilla folder and symbolic links in the hashed folder.
Access Kerio Control's Shell Using SSH and execute ​mount -o rw,remount / via SSH.
Then upload the ca_bundle.tgz file via SFTP (FTP over SSH) to the /tmp folder.
Execute the following lines by copy-pasting the following to an SSH terminal:
cd /tmp
rm /var/winroute/sslcert/hashed/*
rm /usr/share/ca-certificates/mozilla/*.crt
mount -o rw,remount /
tar -xvf ca_bundle.tgz
mv mozilla/*.crt /usr/share/ca-certificates/mozilla/
mv hashed/*.0 /var/winroute/sslcert/hashed/
rm -rf mozilla hashed
rm ca_bundle.tgz
/etc/boxinit.d/60winroute restart
|
|
|