topic Re: ssl certificate for user check in Firewall and Security Management

ssl certificate for user check

Yuli — Wed, 16 Apr 2025 09:08:57 GMT

Hi,

I want to use ssl certificate for user check that I created it for Https inspection before but the certificate has .crt extention but user check need .p12 extention.

Okay I can convert crt to p12 but I need private key but I have not private key file. How can we convert crt to p12

Re: ssl certificate for user check

Nüüül — Wed, 16 Apr 2025 10:07:46 GMT

without private key, you can´t.

And, https inspection acts as Certificate Authority. Not sure, if this certificate has the appropriate Key Usages set to be used as Server Certificate.

Re: ssl certificate for user check

Yuli — Wed, 16 Apr 2025 10:17:07 GMT

Can I export private key from Management Server?

Re: ssl certificate for user check

Nüüül — Wed, 16 Apr 2025 10:27:37 GMT

no, not afaik.

Re: ssl certificate for user check

PhoneBoy — Wed, 16 Apr 2025 13:14:23 GMT

The cert used for HTTPS Inspection is a Certificate Authority certificate, meaning it signs other certificates.
It cannot be used as a server certificate (needed for UserCheck, etc).

For security reasons, we do not allow the export of private keys outside of the initial generation process.