Guest

Preview Tool

Cisco Bug: CSCup80195 - Root Cert List Need to add GlobalSign Root CA - R3 Cert

Last Modified

Mar 13, 2017

Products (1)

  • Cisco Email Security Appliance

Known Affected Releases

7.6.3-019 7.6.3-023 8.0.1-023 8.0.1-111 8.5.6-063

Description (partial)

Symptom:
Currently the Cisco Email Security Appliance (ESA) does not include the following root certificate in it's list of trusted system CA certificates:

GlobalSign Root CA - R3

As a result, when using the TLS in either preferred or required mode with the 'Verify' option, TLS connections to or from hosts that are signed by this certificate chain will fail to verify and TLS will not be used.

Conditions:
In the mailflow a Certificate was signed with GlobalSign Root CA -R3 in the Chain of Trust  and TLS verification was enabled
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.