topic Re: ASN1 OID field in certificate in General Topics

ASN1 OID field in certificate

AkosBakos — Fri, 13 Dec 2024 09:49:48 GMT

Hi Mates,

Is there anybody here who has experience with "ASN1 OID" field in certificates?

I wanted to upload a certificate with this field, as inbound certificate, but the SmarConsole gave me a big error:

Password is ok, etc, etc

Akos

Re: ASN1 OID field in certificate

PhoneBoy — Fri, 13 Dec 2024 15:08:48 GMT

I see you've also opened a TAC case already.
It is odd that you said this was an inbound certificate and the error message is about an outbound one.

Re: ASN1 OID field in certificate

HeikoAnkenbrand — Sat, 21 Dec 2024 19:46:08 GMT

The error you're encountering when uploading a certificate with an ASN1 OID field as an inbound/outbound certificate in SmartConsole could be due to a few potential issues:

Certificate Chain Mismatch: Ensure that the certificate chain is correctly configured. If the certificate chain in the SmartConsole does not match the chain of the server handling the certificate, it can cause errors. You may need to delete the existing Certificate Authority object and create a new one with the updated certificate chain. For more details, you can refer to this solution.
Unsupported OID: If the certificate contains an unfamiliar or custom critical extension OID, it might not be supported by the system, leading to verification failures. In such cases, you may need to contact Check Point Support to get a Hotfix that addresses this issue. More information can be found here.
Certificate Format: Ensure that the certificate is in the correct format and that all required fields are properly filled. Sometimes, errors can occur if the certificate is not formatted correctly or if there are missing fields.

Re: ASN1 OID field in certificate

AkosBakos — Sat, 21 Dec 2024 20:31:41 GMT

Hi, yes, but after I clarified that.

Re: ASN1 OID field in certificate

_Val_ — Mon, 23 Dec 2024 08:26:46 GMT

Hi Heiko, are you using Ai Copilot to generate those answers? 🙂

Re: ASN1 OID field in certificate

HeikoAnkenbrand — Mon, 23 Dec 2024 14:14:48 GMT

@_Val_

I am currently programming a SmartConsole plugin to integrate the Check Point Ai Copilot, Microsoft Ai Copilot and ChatGPT onprem. The only problem is that I always have to generate an API key for all Ai's, which cannot simply be integrated into the SmartConsole. I think that the API keys make it impossible to simply integrate this into the SmartConsole. Therefore I cannot make the SmartConsole-Plugin public.

---
PS:

So I tested it with this article 😉

As the answer sounded good, I have adapted it a little and published it.

Re: ASN1 OID field in certificate

_Val_ — Mon, 23 Dec 2024 14:12:10 GMT

I saw your other posts that looked like CP AI Copilot too 🙂

It would help if you added a note when AI was involved—just a suggestion.

Re: ASN1 OID field in certificate

PhoneBoy — Mon, 23 Dec 2024 20:48:19 GMT

There's a reason I have @CheckMatesAI include a disclaimer. 😉