Connect. Communicate. Collaborate. Securely.

Domů » Česky » Kerio Connect » Antivir Bitdefender nestahuje aktualizace (Po upgrade z 8.4 na poslední verzi 9.2.4. nefunguje antivir)
  •  
i-servis je nyní offline i-servis

Příspěvky: 5
Odeslat poštu tomuto uživateli
U zákazníka na verzi 8.4 už asi 10 dní nešla aktualizace AV Sophos, z podpory mu doporučili přechod na nejnovější verzi.

Po dnešním upgrade na 9.2.4 už antivir (Bitdefender) nenaběhl vůbec.
Z logu jsme vyčetli, že kvůli chybě certifikátů nestahuje AV databázi.
Po marných pokusech najít chybu v certifikátech jsme zkopírovali databázi z jiné instalace Keria, s tou se antivir rozběhl.
Stále ovšem nefunguje aktualizace databáze.
Nemáte prosím typ, čím by to mohlo být?
Díky.

Zde je debug log:

[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Initializing SSL context ...
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: SSLv2,SSLv3,TLSv1_2 protocols disabled.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Client cipher list used: AESGCM:HIGH:+EDH-RSA-DES-CBC3-SHA:+EDH-DSS-DES-CBC3-SHA:+DES -CBC3-SHA:MEDIUM:!EXPORT:!MD5:!aNULL:!PSK:!SRP.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Elliptic curve prime256v1 configured.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: 0 user CA certificates loaded into SSL context.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Finished SSL context initialization.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Peer's certificate chain consist of 3 certificates. Dump:
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: 0.sha-1: 40:df:d6:63:b7:b6:09:5c:50:da:2f:b2:06:1b:11:e7:f0:f0:1d:65
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: 0.s: '/C=US/postalCode=95113/ST=CA/L=San Jose/street=111 N. Market Street/O=Kerio Technologies Inc./OU=www.kerio.com/contacts/OU=PremiumSSL Wildcard/CN=*.kerio.com'
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: 0.i: '/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Organization Validation Secure Server CA'
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: 1.sha-1: 10:4c:63:d2:54:6b:80:21:dd:10:5e:9f:ba:5a:8d:78:16:9f:6b:32
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: 1.s: '/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Organization Validation Secure Server CA'
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: 1.i: '/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority'
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: 2.sha-1: f5:ad:0b:cc:1a:d5:6c:d1:50:72:5b:1c:86:6c:30:ad:92:ef:21:b0
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: 2.s: '/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Certification Authority'
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: 2.i: '/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External CA Root'
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Going to verify identity of peer's server bdupdate.kerio.com.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Checking certificate chain *.kerio.com | COMODO RSA Organization Validation Secure Server CA | COMODO RSA Certification Authority
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Failed to verify SSL certificate via OS: Certificate (CN=*.kerio.com) wasn't verified: (16842816) Unable to get issuer certificate (issuer certificate is missing in trusted root certificates), This certificate has unknown revocation status, Error status = 0x1010040, Info status = 0x0; at depth: 0.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Failed to verify SSL certificate: (20) unable to get local issuer certificate
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Searching for alternative issuer
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Going to download http://crt.comodoca.com/COMODORSAAddTrustCA.crt.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Successfully downloaded version.info.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Downloaded DER certificate COMODORSAAddTrustCA.crt.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Successfully read certificate from http://crt.comodoca.com/COMODORSAAddTrustCA.crt
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Certificate 'http://crt.comodoca.com/COMODORSAAddTrustCA.crt' downloaded and added to peer's certificate chain.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: No new issuer found, skipping...
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Searching for alternative issuer
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Going to download http://crt.comodoca.com/COMODORSAOrganizationValidationSecur eServerCA.crt.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Successfully downloaded version.info.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Downloaded DER certificate COMODORSAOrganizationValidationSecureServerCA.crt.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Successfully read certificate from http://crt.comodoca.com/COMODORSAOrganizationValidationSecur eServerCA.crt
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Certificate ' http://crt.comodoca.com/COMODORSAOrganizationValidationSecur eServerCA.crt' downloaded and added to peer's certificate chain.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Going to download http://crt.comodoca.com/COMODORSAAddTrustCA.crt.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Successfully downloaded version.info.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Downloaded DER certificate COMODORSAAddTrustCA.crt.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Successfully read certificate from http://crt.comodoca.com/COMODORSAAddTrustCA.crt
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Certificate 'http://crt.comodoca.com/COMODORSAAddTrustCA.crt' downloaded and added to peer's certificate chain.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: No new issuer found, skipping...
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Failed to verify server's identity.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) ERR: Cannot find update location: SSL certificate problem: unable to get local issuer certificate. Download failed.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Cannot find update location: SSL certificate problem: unable to get local issuer certificate. Download failed with status: 2 and sub status 0.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Plugin state changed from Updating to Closed.
[02/Sep/2017 19:24:53][5372] {avir} (PID: 7140) Bitdefender_plugin: Updating ended.
[02/Sep/2017 19:24:53][6160] {avir} progress event: M Antivirus update failed: Cannot find update location: SSL certificate problem: unable to get local issuer certificate. Download failed.
[02/Sep/2017 19:24:53][6160] {avir} progress event: F
  •  
i-servis je nyní offline i-servis

Příspěvky: 5
Odeslat poštu tomuto uživateli
Vyřešeno se supportem Keria.

1. Opravná instalace Keria, smazání adresářů AV viz http://kb.kerio.com/1285
2. V maiserver.cfg upravit položku "ValidateUpdateServer" na 0 (bylo nastaveno 1)
Předchozí téma: kade debug
Další téma: Rozdílné číslo verze
Jít na fórum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Aktuální čas: So lis 18 18:37:24 CET 2017

Celkový čas potřebný k vygenerování této stránky: 0.00315 vteřin
.:: Kontakt :: Domů ::.
Běží na: FUDforum 3.0.4.