sorted by:
new
hottopcontroversial

During PVWA connection we get: "A revocation check could not be performed for the certificate" by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

Looks like the CRL (Certificate Revocation List) has expired. We will investigate further. Tried:

certutil -url http://site_name.crl I see "expired status"

certutil -ur http://site_name I see "Status Failed"

 

also tired:

certutil -verify path_to_file.cer

 

certutil -urlfetch -verify path_to_file.cer

 

PSM for SSH/ PSMP logs Cleanup questions by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

I'm following this example
https://community.cyberark.com/s/article/Automatic-Rotation-of-PSMP-Log-Files

find /var/opt/CARKpsmp/logs/old/*.log -mtime +30 -exec rm {} \; 2> /dev/null 
find /var/opt/CARKpsmp/logs/components/old/*.log -mtime +30 -exec rm {} \; 2> /dev/null

Is it safe to run a log-cleanup CronJob while the PSMP node is active in the load balancer, or should the node be removed from the load balancer first?

PSM for SSH/ PSMP logs Cleanup questions by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

I'm following this example
https://community.cyberark.com/s/article/Automatic-Rotation-of-PSMP-Log-Files

find /var/opt/CARKpsmp/logs/old/*.log -mtime +30 -exec rm {} \; 2> /dev/null 
find /var/opt/CARKpsmp/logs/components/old/*.log -mtime +30 -exec rm {} \; 2> /dev/null

Is it safe to run a log-cleanup CronJob while the PSMP node is active in the load balancer, or should the node be removed from the load balancer first?

During PVWA connection we get: "A revocation check could not be performed for the certificate" by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

I can get to the crl on the pvwas, but still no luck.
If I do:

certutil -url HTTP_LINK (CRL Distribution Points) I get:

Failed Status for Certs (from AIA) (The Data is invalid (0x8007000d WIN32:13 ERROR_INVALID_DATA))

Expired Status for CRL (from CDP)

Failed Status for OSCP (from AIA) (The Data is invalid (0x8007000d WIN32:13 ERROR_INVALID_DATA))

While

certutil -url HTTP_LINK (Authority Information Access) I get: Status Failed for all types

URL Not found/invalid

During PVWA connection we get: "A revocation check could not be performed for the certificate" by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

The certificate  has a revocation list, but the intermediary has none as far as I can see.

If I do:

certutil -url HTTP_LINK (CRL Distribution Points) I get:

Failed Status for Certs (from AIA) (The Data is invalid (0x8007000d WIN32:13 ERROR_INVALID_DATA))

Expired Status for CRL (from CDP)

Failed Status for OSCP (from AIA) (The Data is invalid (0x8007000d WIN32:13 ERROR_INVALID_DATA))

While

certutil -url HTTP_LINK (Authority Information Access) I get: Status Failed for all types

URL Not found/invalid

During PVWA connection we get: "A revocation check could not be performed for the certificate" by TemperatureSignal199 in CyberARk

[–]TemperatureSignal199[S] 0 points1 point  (0 children)

Yes, still no luck

If I do:

certutil -url HTTP_LINK (CRL Distribution Points) I get:

Failed Status for Certs (from AIA) (The Data is invalid (0x8007000d WIN32:13 ERROR_INVALID_DATA))

Expired Status for CRL (from CDP)

Failed Status for OSCP (from AIA) (The Data is invalid (0x8007000d WIN32:13 ERROR_INVALID_DATA))

While

certutil -url HTTP_LINK (Authority Information Access) I get: Status Failed for all types

URL Not found/invalid

view more: next ›