search cancel

"ERROR: Unknown error in execution : Unable to send data to the server." while testing secure ICAP with Java version of ssecls

book

Article ID: 201321

calendar_today

Updated On:

Products

Protection Engine for Cloud Services Protection Engine for NAS

Issue/Introduction

After configuring Symantec Protection Engine (SPE) 8.x for Secure ICAP, you attempt to test SPE using the Java version of the ssecls test tool. Output from ssecls includes:

<<<<<<<<<<<<<<<<<<<<<< SSE Command Line Scanner Application Start >>>>>>>>>>>>>>>>>>>>

In Legacy processing mode
Newer implementation requested by user
ERROR: Unknown error in execution : Unable to send data to the server.
<<<<<<<<<<<<<<<<<<<<<< SSE Command Line Scanner Application End >>>>>>>>>>>>>>>>>>>>

 

 

Environment

Release : 8.x

Resolution

- cd to C:\Program Files\Symantec\Scan Engine\CmdLineScanner\C
- type: ssecls.exe -secure true -verifycert false -server 127.0.0.1:11344:0:true .\ 

Additional Information

The parameter -verifycert false  causes the C version of ssecls to skip checking the certificate.

To run the C version with full certificate verification, use syntax similar to ssecls.exe -secure true -verifycert true -cacertfile "C:\TestICAPS\cert.pem" -clientcert "C:\TestICAPS\client.cer" -clientpvtkey "C:\TestICAPS\client.key" -pvtkeypass "symc" -server 127.0.0.1:11344:0:true C:\TestICAPS\Testfiles

The java version of ssecls will also work, but you need to add the certs to a java keystore, and specify that keystore