R65 HFA01 released

[RayPesek]

Thanks for the note. I need to migrate a test R61 Express firewall from Nokia to SPLAT on new hardware soon. It will be interesting to see how it works with an upgrade_import and HFA01 already installed.

Ray

[hanjan]

Originally Posted by RayPesek

I'd run an upgrade_export right now if I were you and copy it somewhere safe.

Have you tried just running the uninstall script?

Ray

The uninstall script didn't work and the upgrade_export created only a partial export in a corrupt tgz file, but I managed to extract all the necessary files and do a reinstall and just replace the necessary file with the the ones I manage to export. Anyway - problem is resolved now :)

[melipla]

Originally Posted by RayPesek

While you're waiting, what were the problems?

Everything I saw onscreen said that the HFA had installed "successfully" and that I was to reboot. Post reboot I was unable to authenticate to the SCS with the gui. I recieved the standard error message about making sure the server is running and that you are defined as a gui client. I accessed the SCS via the command line and looked at who was defined as administrators / gui hosts and noticed that both lists were empty. I added my IP and created a new administrator, cpstop / cpstart and was still unable to log in to the SCS. This is when I created a ticket with support, which got escalated after about an hour. I had uploaded my cpinfo and after looking at it, support informed me that "according to my cpinfo a lot of files are missing from the config directory". At this point I decided to restore from backup and left the support person to figure out why files were missing.

I haven't heard anything back from support but did a little poking while I'm waiting for my logs to transfer off so I can rebuild my SCS on the production hardware. My problem may be related to an earlier problem I had with R65 SCS and database revisions, which is detailed in this thread. These files /opt/CPInstLog/install_SecurePlatform_HOTFIX_R65_01.elg and /opt/CPInstLog/install_fw1_HOTFIX_R65_01.elg have a lot of errors from gtar. The logs are not too definitive as to gtar being the cause but so far it's the best lead I have.

Two notes about R65 HFA 01:

It contains Edge libsw's of 7.5.23 which actually has a valid "version.txt" file containing file names and byte sizes unlike libsw 7.0.48 which is the latest one available for download.

The HFA automatically updates INSPECT files, before this was a manual process.

[RayPesek]

Thanks for the update.

Ray

[melipla]

I've been able to confirm that the gtar update [referenced in previous post/thread] causes R65 HFA1 [and HFA2] to incorrectly say it completed successfully, which leads to my initial post regarding HFA1.

I successfully installed HFA2 using the original R65 /opt/CPshrd-R65/util/gtar but not with the updated version.

[RayPesek]

Thanks for the note. I'm sure you have saved someone some grief.

Ray