The ca-bundle.pem contains certificates that are expired

Products

• Protection Engine for NAS
• Protection Engine for Cloud Services

Issue/Introduction

You are reviewing your SPE and note the following files contain certificates that have either expired, or are about to expire.

• <SPE_INSTALL_FOLDER>/definitions/Stargate/digest/fallback/ca-bundle.pem
• <SPE_INSTALL_FOLDER>/definitions/Stargate/master/digest/fallback/ca-bundle.pem

Environment

SPE 9.1 and older

Resolution

The ca-bundle.pem files do not have any impact on the SPE.

The ca-bundle.pem files were introduced in the Stargate directory as a reference for cert stores, but were not used for long.  As a result they were removed in subsequent versions of the SPE (9.2 and newer).  The ca-bundle.pem files are placed inside the fallback directories which are not referenced as the SPE's current definitions are stored in the <SPE_INSTALL_FOLDER>/definitions/Stargate/digest/symcdata/stargate/<DEF_VERSION> folders.