Clients / hosts may receive an expired SSL certificate warning when the SSL Forward Proxy fails to purge expired SSL certificates from the cache

Enter the following CLI commands to clear the certificate cache on the ProxySG appliance.

 

ProxySG#conf t       
Enter configuration commands, one per line.  End with CTRL-Z.
ProxySG#(config)ssl  
ProxySG#(config ssl)clear-certificate-cache

 

 

The clear-certificate-cache is actually a hidden command so you won't be able to get help on the command, you will however see an OK message after executing the command.

You can  confirm that the cache has been cleared by going to the following URL

https://<proxyip:port>/sslproxy/certcache

  • SG-300

    SG-300-25, SG-300-10, SG-300-5

  • SG-600

    SG-600-35, SG-600-20, SG-600-10

  • SG-900

    SG-900-55, SG-900-45, SG-900-30, SG-900-20, SG-900-10B, SG-900-10

  • SG-9000

    SG-9000-40, SG-9000-30, SG-9000-20B, SG-9000-20, SG-9000-5

  • SG-S200

    SG-S200-40, SG-S200-30, SG-S200-20, SG-S200-10

  • SG-S400

    SG-S400-40, SG-S400-30, SG-S400-20

  • SG-S500

    SG-S500-20, SG-S500-10

  • SWG VA-100

    SWG VA-100

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Symantec Corporation