After configuring Symantec Protection Engine (SPE) 8.x for Secure ICAP, you attempt to test SPE using the Java version of the ssecls test tool. Output from ssecls includes:
<<<<<<<<<<<<<<<<<<<<<< SSE Command Line Scanner Application Start >>>>>>>>>>>>>>>>>>>>
In Legacy processing mode
Newer implementation requested by user
ERROR: Unknown error in execution : Unable to send data to the server.
<<<<<<<<<<<<<<<<<<<<<< SSE Command Line Scanner Application End >>>>>>>>>>>>>>>>>>>>
Release : 8.x
- cd to C:\Program Files\Symantec\Scan Engine\CmdLineScanner\C
- type: ssecls.exe -secure true -verifycert false -server 127.0.0.1:11344:0:true .\
The parameter -verifycert false causes the C version of ssecls to skip checking the certificate.
To run the C version with full certificate verification, use syntax similar to ssecls.exe -secure true -verifycert true -cacertfile "C:\TestICAPS\cert.pem" -clientcert "C:\TestICAPS\client.cer" -clientpvtkey "C:\TestICAPS\client.key" -pvtkeypass "symc" -server 127.0.0.1:11344:0:true C:\TestICAPS\Testfiles
The java version of ssecls will also work, but you need to add the certs to a java keystore, and specify that keystore