Symptom

Peer certificate cannot be authenticated with known CA certificates 2022-02-05 04:47:32 ngfw-job-scheduler-worker-1: INFO AuditEntityRepositoryImpl:84 - Creating AuditEvent: sruupdateimmediate : bb3b1bde-863e-11ec-9620-6feed7ba5c0f : Rule Update 2022-02-05 04:47:32 ngfw-job-scheduler-worker-1: INFO AuditEntityRepositoryImpl:94 - No entity changes to create 2022-02-05 04:47:32 ngfw-job-scheduler-worker-1: INFO SRUUpdateImmediateJob:52 - Updating Rule Update triggered by UI. Deploy after update is set to true 2022-02-05 04:47:32 ngfw-job-scheduler-worker-1: INFO SRUUpdateServices:149 - Start Rule Update package download. 2022-02-05 04:47:32 ngfw-job-scheduler-worker-1: INFO SRUUpdateServices:445 - Downloading file from https://support.sourcefire.com/auto-update/auto-dl.cgi//GetCurrent/sf.xml to /ngfw/var/sf/SRU/sf.xml 2022-02-05 04:47:33 ngfw-job-scheduler-worker-1: ERROR SRUUpdateServices:480 - Failed to download file: sf.xml 2022-02-05 04:47:33 ngfw-job-scheduler-worker-1: ERROR SRUUpdateServices:165 - Failed to download sf.xml file. Curl return code: 7 2022-02-05 04:47:33 ngfw-job-scheduler-worker-1: INFO SRUUpdateHandlerImpl:60 - Return code from downloadService: 7 2022-02-05 04:47:33 ngfw-job-scheduler-worker-1: ERROR SRUUpdateHandlerImpl:68 - Failed to download Rule Updatejava.lang.Exception 2022-02-05 04:47:33 ngfw-job-scheduler-worker-1: INFO NgfwJob:201 - SRUUpdateImmediateJob Job status update: Peer certificate cannot be authenticated with known CA certificates - IN_PROGRESS 2022-02-05 04:47:33 ngfw-job-scheduler-worker-1: INFO AuditEntityRepositoryImpl:84 - Creating AuditEvent: sruupdateimmediate : bbb1d27f-863e-11ec-9620-578c7ddf1318 : Rule Update 2022-02-05 04:47:33 ngfw-job-scheduler-worker-1: INFO AuditEntityRepositoryImpl:94 - No entity changes to create 2022-02-05 04:47:33 ngfw-job-scheduler-worker-1: INFO NgfwJobListener:153 - SRUUpdateImmediate job execution has completed and will not run again. Deleting entity.

Conditions

when I try to update the SRU in latest build, I am getting the error while downloading the package in 5516 FDM mode

Workaround

We need to manually upload the latest SRU package available in cisco page and install the package in device

Further Problem Description