topic Re: Fetch expiration date of 3rd Party Certs in API / CLI Discussion

Fetch expiration date of 3rd Party Certs

Douglas_Rich — Mon, 26 Aug 2024 20:28:31 GMT

Anyone know how to fetch the expiration date of 3rd Part Certs, mobile access portal cert for example.

Is there a command, or API?

I found the data in ssl_certificate_per_GW.C, and though I'd ask before bashing it.

Thank you

Re: Fetch expiration date of 3rd Party Certs

PhoneBoy — Mon, 26 Aug 2024 20:43:58 GMT

We have a tool now that helps with the renewal of these certs.
I think it will also show the expiration dates of the certificates (with the correct options).
See: https://support.checkpoint.com/results/sk/sk182070

Re: Fetch expiration date of 3rd Party Certs

Douglas_Rich — Mon, 26 Aug 2024 21:27:14 GMT

Thanks Dameon, I had written something like that myself already. I'll have to check out the code to get some ideas for future projects. But this tool like mine own currently ignores 3rd party certs. This question is specific to 3rd party certs.

Currently my idea is to parse out ssl_certificate_per_GW.C

I too wonder if someone has some examples of parsing out the .C Check Point Format.

That or I go back to old school cpmiquerybin and try to figure it out 😉

Re: Fetch expiration date of 3rd Party Certs

PhoneBoy — Mon, 26 Aug 2024 23:31:43 GMT

Yeah, I guess we can't renew third party certs, can we 🙂
Either way, hope it will help for other projects.

I also looked in the R82 API docs and did not see anything specific to VPN certificates.
Certificate Authorities, on the other hand, there is plenty there.