topic Re: error viewing certificate HTTPS inspection in Firewall and Security Management

error viewing certificate HTTPS inspection

Wolfgang — Mon, 13 Jun 2022 15:05:02 GMT

We changed the certificate of HTTPS inspection via Smartdashboard following How to renew, import, or export a new HTTPS Inspection certificate

Certificate is imported without error in old Smartconsole application and seen with the correct date and issuer. But in SmartDashboard following error shown if we try to view the certificate. Diabling HTTPS inspection and renew again does not work

Any ideas?

Re: error viewing certificate HTTPS inspection

Vladimir — Mon, 13 Jun 2022 15:32:06 GMT

@Wolfgang , you are stating that you have imported the new certificate. Does that mean it was created by different CA? if so, is that CA added to your Trusted CAs?

Re: error viewing certificate HTTPS inspection

Wolfgang — Mon, 13 Jun 2022 16:14:46 GMT

@Vladimir @yes, it is. The error will be the same if we issue a new certificate from the CheckPoints internal CA.

Re: error viewing certificate HTTPS inspection

Vladimir — Mon, 13 Jun 2022 16:26:38 GMT

Can you open that cert outside of the SmartConsole environment (by double-clicking)? SmartConsole using MS Crypto Shell Extensions as default app for file type. I wander if you may have changed the default app for certs on that PC.

Re: error viewing certificate HTTPS inspection

Alex- — Mon, 13 Jun 2022 17:11:59 GMT

I believe I've had a similar issue a few times and might be due to some sort of asynchronous communication between the legacy and the new console.

It was solved by doing something like regenerating or importing the certificate in Smart Dashboard then exiting it, not publishing but editing the cluster object to view the certificate, press OK so the cluster object is also updated, then publishing and install the policy. I'm sorry I can't be more specific, I don't have right now an environment where I can check that but it was the idea.

Re: error viewing certificate HTTPS inspection

Wolfgang — Mon, 13 Jun 2022 18:29:17 GMT

@Alex- thanks a lot. Don't publish after import of the new certificate via old SmartDashboard then changing something of the gateway object in the normal SmartConsole, close gateway object and then doing publish.

These terrible old SmartDashboard should be deleted and go away......... 8)

Re: error viewing certificate HTTPS inspection

the_rock — Tue, 14 Jun 2022 00:42:21 GMT

I agree 100%. I cant understand for the life of me WHY those old legacy dashboards are still there to edit stuff like inspection, mobile access, qos. Logically, makes no sense to me, just my personal opinion.