On our Firepower Management Centre 2000 appliance (running 6.1.0.3) we generated a Certificate Signing Request (CSR) sent it to our PKI CA who issued us with the necessary certificate for the FMC appliance along with the Root certificate and SubCA certificate.
On the FMC appliance ("Configuration" => "HTTPS Certificate" => "Import HTTPS Server Certificate") I installed the certificate, along with Private Key and Certificate Chain (i.e. contents of Root certificate and SubCA certificate pasted into GUI window field). However, I am still getting "ERR_CERT_INVALID" message on browser when attempting to HTTPS to the FMC appliance.
I have also found the following error logs at the command line of the FMC appliance in file "httpsd_error_log" in the "/var/log/httpd" directory:
[Tue Oct 09 13:03:08.742568 2018] [ssl:warn] [pid 20909] (22)Invalid argument: AH02026: Failed to acquire SSL session cache lock
[Tue Oct 09 13:03:08.742648 2018] [ssl:warn] [pid 20909] (22)Invalid argument: AH02027: Failed to release SSL session cache lock
[Tue Oct 09 13:11:06.872419 2018] [ssl:warn] [pid 21203] (22)Invalid argument: AH02026: Failed to acquire SSL session cache lock
[Tue Oct 09 13:11:06.872491 2018] [ssl:warn] [pid 21203] (22)Invalid argument: AH02027: Failed to release SSL session cache lock
[Tue Oct 09 13:11:28.519305 2018] [ssl:warn] [pid 20907] (43)Identifier removed: AH02026: Failed to acquire SSL session cache lock
[Tue Oct 09 13:11:28.519377 2018] [ssl:warn] [pid 20907] (43)Identifier removed: AH02027: Failed to release SSL session cache lock
[Tue Oct 09 13:13:27.048885 2018] [ssl:warn] [pid 20924] (43)Identifier removed: AH02026: Failed to acquire SSL session cache lock
[Tue Oct 09 13:13:27.048961 2018] [ssl:warn] [pid 20924] (43)Identifier removed: AH02027: Failed to release SSL session cache lock
Has anyone on the community encountered this or similar before? and have any ideas on these "Failed to acquire/release SSL session cache lock" logs?
Thanks
Damian
