CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Web Security > Connectra
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-08-08
Junior Member
 
Join Date: 2008-04-08
Posts: 12
Rep Power: 0
armando.ferreira has an average reputation (10+)
Default Install Verisign Certificate and intermediate CA in R62CM w/out admin.GUI

Anyone knows how to install a Verisign cert in PEM format and also intermediate Verisgin CA in Smart Dashboard or by command line in Connectra Console?
I have sent my CSR to VeriSgin and I have just receive my portal certificate and now I dont know how-to. Canīt find any document with instruction for R62CM procedure.
Reply With Quote
  #2 (permalink)  
Old 2008-08-17
Junior Member
 
Join Date: 2008-04-08
Posts: 12
Rep Power: 0
armando.ferreira has an average reputation (10+)
Default Re: Install Verisign Certificate and intermediate CA in R62CM w/out admin.GUI

Solved!
Just cut & paste everything including
---BEGIN CERTIFICATE---
through to
---END CERTIFICATE---
Cut & paste also the intermediate cert that came in the same email received from VeriSign.
The second part starts also with
---BEGIN CERTIFICATE---
and end with
---END CERTIFICATE---
into a new file called connectra.crt. The file will look like this
---BEGIN CERTIFICATE---
MII(your ssl certificate)
---END CERTIFICATE---
---BEGIN CERTIFICATE---
MII(intermediate cert)
---END CERTIFICATE---
Upload file to connectra and run $CVPNDIR/bin/InstallCert <certfile> <keyfile> '<passwd>' where your "keyfile" is the previous key generate with the CSR utility and "passwd" is the password used with the utility. Execute the cvpnrestart command Pages 129 to 131 from R62CM AdminGuide explains well the procedure (except the part that we have to concate your cert and the intermediate cert in one).
Reply With Quote
  #3 (permalink)  
Old 3 Weeks Ago
Junior Member
 
Join Date: 2006-06-18
Location: Hong Kong
Posts: 11
Rep Power: 0
tzeon has an average reputation (10+)
Send a message via Skype™ to tzeon
Default Re: Install Verisign Certificate and intermediate CA in R62CM w/out admin.GUI

Nice post, very useful!!
__________________
Simon
CCSE+ NGX, NCSM
Reply With Quote
  #4 (permalink)  
Old 3 Weeks Ago
Junior Member
 
Join Date: 2008-04-08
Posts: 12
Rep Power: 0
armando.ferreira has an average reputation (10+)
Default Re: Install Verisign Certificate and intermediate CA in R62CM w/out admin.GUI

Thanks Tzeon.
One more thing that happened to me for the sake of future actions and no need to say but here it goes:
Keep your <certfile> and <keyfile> in a safe place and don't forget your <passwd>! If you need to reinstall Connectra as long as you keep the same Distinguish Name you can always reinstall ssl certificate with the above procedure.
Regards
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 10:58.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0