FortiSOAR Knowledge Base
FortiSOAR: Security Orchestration and Response software provides innovative case management, automation, and orchestration. It pulls together all of an organization's tools, helps unify operations, and reduce alert fatigue, context switching, and the mean time to respond to incidents.
jankit6
Staff
Staff
Article Id 306981
Description This article describes how to fix internal server errors in FortiSOAR that occur due to SSL cert expiry.
Scope FrotiSOAR.
Solution

Users may experience internal server errors while accessing the FortiSOAR Application at multiple places when trying to access playbooks, connectors, records, etc., which can happen if the Internal SSL cert has expired.

 

Screenshot_44.png

 

Verify the cert expiry date:

openssl x509 -in /etc/pki/ca-trust/source/anchors/cs.loc.root.crt -text -noout | grep "Not After"

 

If the output from the command above shows that the default root cert has expired, renew it with the following command:

 

  1. For FortiSOAR v7.2.0 and above:

 

sudo csadm certs --generate <hostname>  <----- Replace <hostname> with the actual VM's hostname.

 

  1. For versions older than v7.2.0:

 

curl -s https://repo.fortisoar.fortinet.com/downloads/scripts/generate-root-certificate.sh | bash /dev/stdin

 

Ensure the instance can connect to the FortiSOAR repository: https://repo.fortisoar.fortinet.com.
If the issue persists, reach out to the Fortinet TAC team.