[R80.10][API] Retrieve policy package from Checkpoint API, fingerprint not approved error

Romain_Chicot — Mon, 05 Aug 2019 12:58:54 GMT

Hello all,

I'm trying to retrieve a policy package with objects using Checkpoint API.

I would like to use the web_api_show_package script,"$MDS_FWDIR/scripts/web_api_show_package.sh"

I end up with an error, when I look in the generated file, I have the following lines indicating a fingerprint issue :

[Mon Aug 05 14:46:40 CEST 2019 com.checkpoint.mgmt_api.examples.MyLogger.debug()DEBUG]: The parameters that were received: showPackagesList:(-v)=true
[Mon Aug 05 14:46:40 CEST 2019 com.checkpoint.mgmt_api.examples.MyLogger.debug()DEBUG]: Limit number of object per page: 10
[Mon Aug 05 14:46:40 CEST 2019 com.checkpoint.mgmt_api.examples.MyLogger.debug()DEBUG]: Local Ips: [x.x.x.x, y.y.y.y, 127.0.0.1]
[Mon Aug 05 14:46:42 CEST 2019 com.checkpoint.mgmt_api.examples.MyLogger.severe()SEVERE]: Fingerprint was't approved. The fingerprint doesn't match to the fingerprints from the 'api fingerprint' command
[Mon Aug 05 14:46:42 CEST 2019 com.checkpoint.mgmt_api.examples.ShowPackageTool.logoutReportAndExit()INFO]: Script stopped running due to severe error!
[Mon Aug 05 14:46:42 CEST 2019 com.checkpoint.mgmt_api.examples.ShowPackageTool.logoutReportAndExit()INFO]: dirPath: /home/admin/291b8f93-bd5a-46a7-9aa1-15194f563da1
[Mon Aug 05 14:46:42 CEST 2019 com.checkpoint.mgmt_api.examples.ShowPackageTool.logoutReportAndExit()INFO]: tarGzPath: show_package-2019-08-05_02-46-40.tar.gz

I checked API and SMC fingerprint and they are different. Is it the reason why it's not working ?

Would you have an idea to manage through this error ?

Best Regards,

Sullivan Drouard

Re: [R80.10][API] Retrieve policy package from Checkpoint API, fingerprint not approved error

PhoneBoy — Mon, 05 Aug 2019 23:23:17 GMT

Try running the script with the -b flag, which should cause it to ignore the fingerprint error.

Re: [R80.10][API] Retrieve policy package from Checkpoint API, fingerprint not approved error

Romain_Chicot — Tue, 06 Aug 2019 09:01:55 GMT

Hello PhoneBoy,

Thanks a lot for your help, it's working nicely.

Have a greay day !

topic Re: [R80.10][API] Retrieve policy package from Checkpoint API, fingerprint not approved error in Firewall and Security Management

[R80.10][API] Retrieve policy package from Checkpoint API, fingerprint not approved error

Re: [R80.10][API] Retrieve policy package from Checkpoint API, fingerprint not approved error

Re: [R80.10][API] Retrieve policy package from Checkpoint API, fingerprint not approved error