Failed to connect. Curl error code: 77 when using the RSA MFA Agent 9.0 for PAM via REST Protocol
Originally Published: 2024-07-19
Article Number
Applies To
RSA Product/Service Type: MFA Agent for PAM
Issue
The /var/ace/log/mfa_rest.log displays the following error messages:
2024-06-27 09:46:36,623 [0x7fdc160b15c0] INFO (../src/ConnectionHandler/ConnectionHandler.cpp:571) - Connecting to Server: https://primary.rsalab.com:5555/mfa/v1_1/authn 2024-06-27 09:46:36,634 [0x7fdc160b15c0] ERROR (../src/ConnectionHandler/ConnectionHandler.cpp:575) - Failed to connect.Curl error code: 77
Cause
Curl error code 77 indicates an issue related to the SSL root CA certificate. Specifically, it means that application failed to load or verify the SSL root CA certificate file, which is necessary for establishing a secure connection.
Resolution
- Ensure that the server's SSL root CA certificate is imported on the Linux machine, rather than the intermediate or server certificates. Follow these steps in the article on how to export root certificates for RSA SecurID Access Authentication Manager, Identity Router, or Cloud Authentication Service.
- After exporting the certificate, import it into the /var/ace directory on the Linux server.
Related Articles
Using cURL for debug troubleshooting and simulating client sessions Number of Views Is the PAM Agent supported with Redhat 6.2 Number of Views Use curl commands to test the connection between an RSA MFA Agent and Authentication Manager 8.7 Number of Views SSH authentication failed for a challenged user with RSA Authentication Manager using REST protocol for RSA Authentication… Number of Views Authentication error for a challenged user with RSA Authentication Manager using REST protocol for RSA Authentication Agen… Number of Views
Trending Articles
RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide How to Download OTP Token Seed Files from myRSA RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide Microsoft Entra ID External MFA - Relying Party Configuration Using OIDC - RSA Ready Implementation Guide Module "SecurIDModule" could not be found message displayed in the web browser
Don't see what you're looking for?
