Using SSL authentication with Netscape/Mozilla browsers

[roadrunner]

Using SSL authentication with Netscape/Mozilla browsers
In NG, if you use User or Client Auth with SSL, you will have problems if you use a certificate generated by Check Point's internal CA along with a Netscape/Mozilla browser. This is because the certificates Check Point generates are not entirely compatible with these browsers.

Check Point is aware of this problem and will fix it in a hotfix to NG FP3. Other browsers don't have the problem, though anything based on Mozilla (e.g. KMeleon, Galeon, Firebird) will also have the problem.

-- PhoneBoy - 30 Dec 2003


FAQForm
FAQs.Class: AuthenticationFAQs
OperatingSystem?:
FAQs.Version: NG

[sqbany]

So if there is a problem with interna_ca certificate maybe an external certificate will work? Has anyone tried this? I have had NG FP3 so far with HFA_327 and internal certificate doesn't work. I used a solution no #sk13621 in which they suggest using certificate with ServerAuthentication Extended Key Usage but with no results. I even tried to use external certificate generated via openSSL but I wasn't succesful. I guess that migration to the recent version of FW/VPN-1 will solve this problem but for this moment I need some temporary solution. Thanks for any advices.