topic Re: Location of crypt.def file in General Topics

Location of crypt.def file

Jpstu — Mon, 16 Jan 2023 17:47:39 GMT

In an environment with a gateway on R80.20 Take 220 and a VM Management server on 80.40 Take 173, we cannot find the correct crypt.def file. The 80.40 Management Administration guide shows the location as /opt/CPR8040CMP-R80.40/lib/crypt.def, but this location does not exist on our server:

Was there a change to this that we are unaware of? Does anyone know where we would find the correct crypt.def file?

Thanks

Re: Location of crypt.def file

the_rock — Mon, 16 Jan 2023 18:00:47 GMT

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk98241

This is from R81.20 mgmt server, but its exact same thing on yours, just replace R81.20 with R80.40

Andy

[Expert@QUANTUM-MANAGEMENT:0]# cd $FWDIR/lib
[Expert@QUANTUM-MANAGEMENT:0]# pwd
/opt/CPsuite-R81.20/fw1/lib
[Expert@QUANTUM-MANAGEMENT:0]# ls -lh crypt.def
-rw-r----- 1 admin bin 12K Nov 16 06:21 crypt.def
[Expert@QUANTUM-MANAGEMENT:0]#

Re: Location of crypt.def file

Jpstu — Mon, 16 Jan 2023 19:27:49 GMT

Hi,

We did try that one but changes made to it do not propagate to the gateway. The R80.40 Security Management Administration guide shows that for an 80.40 Management server and an 80.20 gateway the file should be /opt/CPR8040CMP-R80.40/lib/crypt.def but this location is not present at all. Even when we set up a Lab to investigate on a fresh install this directory was not created.

Re: Location of crypt.def file

the_rock — Mon, 16 Jan 2023 19:30:58 GMT

I never had that problem in my old R80.40 mgmt server, something makes no sense. What happens if you do this from mgmt server ssh expert mode:

cd $FWDIR/lib

ls -lh crypt*

Re: Location of crypt.def file

Jpstu — Mon, 16 Jan 2023 19:38:48 GMT

Yes, we find it a bit confusing as well, the output from the above command is :

12 -rw-r----- 1 admin bin 12233 Jan 16 14:17 crypt.def
4 -rw-r----- 1 admin bin 821 Apr 16 2020 crypt_ssl.def

but we also found this:

Expert@SMS80.40:0]# find / -name crypt.def
find: /proc/36863/task/92966: No such file or directory
find: /proc/92970: No such file or directory
/opt/CPsuite-R80.40/fw1/lib/crypt.def
/opt/CPR7520CMP-R80.40/lib/crypt.def
/opt/CPR7540CMP-R80.40/lib/crypt.def
/opt/CPR76CMP-R80.40/lib/crypt.def
/opt/CPSFWR77CMP-R80.40/lib/crypt.def
/opt/CPSFWR80CMP-R80.40/lib/crypt.def
/opt/CPR77CMP-R80.40/lib/crypt.def
/opt/CPR75CMP-R80.40/lib/crypt.def
/opt/CPNGXCMP-R80.40/lib/crypt.def
/opt/CPSG80CMP-R80.40/lib/crypt.def
/opt/CPR71CMP-R80.40/lib/crypt.def
/opt/CPSG80R75CMP-R80.40/lib/crypt.def

This aligns with what the admin guide shows but does not include the file for an 80.20 gateway.

Re: Location of crypt.def file

the_rock — Mon, 16 Jan 2023 19:40:17 GMT

Thats not what I asked though 🙂

Do this:

cd $FWDIR/lib

ls -lh crypt*

Re: Location of crypt.def file

Jpstu — Mon, 16 Jan 2023 19:44:26 GMT

Sorry, I put it at the top of the last reply but did not include the full command:

[Expert@SMS80.40:0]# cd $FWDIR/lib
[Expert@SMS80.40:0]# pwd
/opt/CPsuite-R80.40/fw1/lib
[Expert@SMS80.40:0]# ls -lh crypt*
-rw-r----- 1 admin bin 12K Jan 16 14:17 crypt.def
-rw-r----- 1 admin bin 821 Apr 16 2020 crypt_ssl.def

Re: Location of crypt.def file

_Val_ — Tue, 17 Jan 2023 07:31:36 GMT

Make changes in $FWDIR/lib/crypt.def and see if it helps. Backup the file first.

Re: Location of crypt.def file

G_W_Albrecht — Tue, 17 Jan 2023 09:37:15 GMT

See in https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_SecurityManagement_AdminGuide/Topics-SECMG/Configuring_Implied_Rules_or_Kernel_Tables_for_Security_Gateways_crypt.def.htm?Highlight=crypt.def

Version of the Target Security Gateway	Location of the File
R80.40	`/opt/CPsuite-R80.40/lib/crypt.def`
R80.30	`/opt/CPR8040CMP-R80.40/lib/crypt.def`
R80.20SP on Maestro, or Scalable Chassis	`/opt/CPR8040CMP-R80.40/lib/crypt.def`
R80.20	`/opt/CPR8040CMP-R80.40/lib/crypt.def`

Re: Location of crypt.def file

Jpstu — Tue, 17 Jan 2023 15:55:56 GMT

Thank you for your reply. The problem we have is that there is no /opt/CPR8040CMP-R80.40/lib/ directory on the SMS even though the documentation show that there should be. When we set up a lab with an 80.40 Management server and an 80.20 gateway, it didn't have that directory either.

Re: Location of crypt.def file

the_rock — Tue, 17 Jan 2023 20:52:38 GMT

I would check with TAC, because that simply makes no sense.