topic Capsule Cloud Portal Entrust Certificate is revoked in SASE and Remote Access

Capsule Cloud Portal Entrust Certificate is revoked

Dan_Roddy — Thu, 14 Feb 2019 19:53:30 GMT

Check CRL Result

Certificate issued by L1K with serial number 4630da99afeb50f40000000050e3e924 has been revoked.

Revocation Date: Wednesday, February 13, 2019 8:24:51 PM +00:00

Revocation Reason: Affiliation Changed

Re: Capsule Cloud Portal Entrust Certificate is revoked

PhoneBoy — Fri, 15 Feb 2019 03:49:16 GMT

Looks like the problem was rectified:

Re: Capsule Cloud Portal Entrust Certificate is revoked

Dan_Roddy — Fri, 15 Feb 2019 16:11:54 GMT

All 3 of these certificate checks fail and say it is revoked: Entrust, Digicert and Qualys

Why is no one seeing this? By the way, Chrome does not tell the truth,

Firefox does not lie nor does Edge or IE, all say NOT SECURE

Secure Connection Failed

An error occurred during a connection to cloud.checkpoint.com. Peer’s Certificate has been revoked. Error code: SEC_ERROR_REVOKED_CERTIFICATE

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

Re: Capsule Cloud Portal Entrust Certificate is revoked

Dan_Roddy — Fri, 15 Feb 2019 16:55:57 GMT

OK, Chrome now is trustworthy. Chrome is reporting 'cert revoked'.

Your connection is not private

Attackers might be trying to steal your information from cloud.checkpoint.com (for example, passwords, messages, or credit cards). Learn more

NET::ERR_CERT_REVOKED

Re: Capsule Cloud Portal Entrust Certificate is revoked

PhoneBoy — Fri, 15 Feb 2019 20:03:51 GMT

I guess this is still an issue.

Here's what I saw from TAC earlier today:

We are getting cases that our cloud portal (cloud.checkpoint.com) is inaccessible due to a revoked SSL certificate. This seems to affect customer with HTTPS inspection enabled on the on-premise gateways. You can see a message similar to the following log:

Please advise customers to use the following workaround until this issue is addressed.

Create a host object representing the cloud gateway (217.68.8.83).
Add the host to the destination fields in the HTTPS bypass rule.

Re: Capsule Cloud Portal Entrust Certificate is revoked

Dan_Roddy — Fri, 15 Feb 2019 20:18:13 GMT

Please check the certificate live, don't use the browser cache, it is out of date.

Check here: www.entrust.net/customer/crl_form.cfm

Re: Capsule Cloud Portal Entrust Certificate is revoked

Dan_Roddy — Fri, 15 Feb 2019 22:14:22 GMT

I have had cloud.checkpoint.com bypassed for over a year. It will not work unless it is bypassed. My logs show that it is bypassed.

Oh, never mind. Someone installed a new certificate, all is well now. Thank you for listening to me.