GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Control » Root CA let's encrypt and SSL inspection
Re: Root CA let's encrypt and SSL inspection [message #150833 is a reply to message #150828] Thu, 13 January 2022 13:39 Go to previous messageGo to previous message
kimiko1086 is currently offline  kimiko1086
Messages: 9
Registered: March 2018
To resolve the issue, kindly update the CA certificates on the Kerio Control side by following the below steps:

Download the attached ca_bundle.tgz file (or from this link). You can extract the content and verify that's just PEM .crt files in the Mozilla folder and symbolic links in the hashed folder.
Access Kerio Control's Shell Using SSH and execute ​mount -o rw,remount / via SSH.
Then upload the ca_bundle.tgz file via SFTP (FTP over SSH) to the /tmp folder.
Execute the following lines by copy-pasting the following to an SSH terminal:

cd /tmp
rm /var/winroute/sslcert/hashed/*
rm /usr/share/ca-certificates/mozilla/*.crt
mount -o rw,remount /
tar -xvf ca_bundle.tgz
mv mozilla/*.crt /usr/share/ca-certificates/mozilla/
mv hashed/*.0 /var/winroute/sslcert/hashed/
rm -rf mozilla hashed
rm ca_bundle.tgz
/etc/boxinit.d/60winroute restart
 
Read Message
Read Message dialog-warning.png
Read Message
Read Message
Read Message
Read Message
Previous Topic: Access to VPN client
Next Topic: System erros - automatic restarts
Goto Forum:
  


Current Time: Wed Feb 08 10:46:13 CET 2023

Total time taken to generate the page: 0.02142 seconds