topic Re: Certificate Revoked error in Spark Firewall (SMB)

Certificate Revoked error

slay39 — Thu, 15 Aug 2019 11:23:20 GMT

Hi Checkmates,

I cannot login GUI dashbord, it gives "Certificate Revoked" error. when I check revoked certificate I saw that 7 of 27 certificate was revoked.

cpca_client lscert -stat Revoked -kind SIC
cpca_client lscert -stat Valid -kind SIC

when I check the disk situation I saw log directory was full so that I removed old logs. disk situation is okay now but I still cannot login. Should I apply this SK?

Solution ID	sk20905
Product	Security Management, Multi-Domain Management
Version	All
Platform / Model	All
Date Created	02-Tem-2003
Last Modified	10-Tem-2018

Re: Certificate Revoked error

G_W_Albrecht — Fri, 16 Aug 2019 08:11:51 GMT

You are using a SMB appliance ? R80.xx version ? If you have a working SMS snapshot/backup, there is no reason not to try sk20905.

Re: Certificate Revoked error

slay39 — Fri, 16 Aug 2019 13:20:27 GMT

we are using 2x13800 (cluster) with R80.10

management is virtual and it is on the vmware. should I take snapshot of virtual machine memory also. what is the best way of snapshot?

Re: Certificate Revoked error

Pedro_Espindola — Fri, 16 Aug 2019 14:37:37 GMT

Have in mind that taking vmware snapshots of a log server can take a lot of space. The old logs are deleted and replaced by new ones, but the snapshot with the old logs will still be there, so at some point you'll have double the size or your /var/log partition.

If you have space, that's not a problem. Just account for that.