topic R80.20 ICA Management Tool in General Topics

R80.20 ICA Management Tool

Eduardo_Garfias — Wed, 31 Oct 2018 17:25:52 GMT

Hi guys!, i have an issue trying to to generate a certificate from a request (pkcs10), the message i get is "Failed Creating Certificate. Got Bad input" (Image attached).... same request on a box with R80.10 its working ... but not on R80.20

SK That i used for setting up ICA Management Tool Setting up the ICA Management Tool

I am trying to complete a certificate from an SMB Appliance for VPN - i am using this sk https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk109139

any of you guys have been into something similar?

Thanks & Regards

Re: R80.20 ICA Management Tool

G_W_Albrecht — Fri, 02 Nov 2018 12:43:58 GMT

If it does work correctly on R80.10 i would involve TAC - sounds like a bug...

Re: R80.20 ICA Management Tool

Danny — Fri, 02 Nov 2018 16:54:32 GMT

You obviously followed the procedure I described for locally managed SMB appliances here:

HowTo Set Up Certificate Based VPNs with Check Point Appliances - R77 edition

I suggest try a different browser, start the ICA Management Tool with our ccc script and then access it via http://10.1.1.100:18265, or use the cpca_client command in expert mode to perform the same action on CLI as you are trying to perform in your web browser.

Re: R80.20 ICA Management Tool

Eduardo_Garfias — Fri, 02 Nov 2018 17:04:11 GMT

Thanks for the Responses, i opened a case with TAC, turns out that on version R80.20 you need to remove the

"-----BEGIN CERTIFICATE REQUEST------" and "-----END CERTIFICATE REQUEST-----"

Just paste the certificate without this and works fine, strange that its not the way it works ons previous versions R77.30 and R80.10

but it is succesfully on that way

Thanks again. mates!

Re: R80.20 ICA Management Tool

Danny — Fri, 02 Nov 2018 17:20:11 GMT

Thank you for posting the solution!

Re: R80.20 ICA Management Tool

G_W_Albrecht — Mon, 05 Nov 2018 08:52:09 GMT

Did you already ask if there is an sk for this issue ? Such a big change must be documented in the sk(s) (sk109139 / sk30501 / sk94028).

Re: R80.20 ICA Management Tool

Uri_Lewitus — Mon, 05 Nov 2018 13:18:59 GMT

Hi Eduardo

Can you share the ticket number please - I would like to get to the bottom of this and find out what was changed. Having the SR number would really help

Thanks,

Uri