topic Re: Incorrect password when importing SSL certificate into Mobile Access blade in SASE and Remote Access

Solved: Incorrect password when importing SSL certificate into Mobile Access blade

RickyDan — Sun, 17 Jul 2022 18:36:19 GMT

I am trying to upload a certificate to the Mobile Access blade (Gateway Properties > Mobile Access > Portal Settings > Import). However, I am always receiving an incorrect password error. I am generating the P12 file using a certificate and private key, both in PEM format, with the following command.

openssl pkcs12 -export -out p12file.p12 -inkey private-key.pem -in wildcard-cert.pem -passin pass:MyPassword -passout pass:MyPassword

Solution: Use openssl version 1.1.1 with the above command. I was using version 3.x.

Re: Incorrect password when importing SSL certificate into Mobile Access blade

the_rock — Sun, 17 Jul 2022 13:27:27 GMT

Let me double check, but I believe command seems correct.

Re: Incorrect password when importing SSL certificate into Mobile Access blade

Jarvis_Lin — Sun, 17 Jul 2022 14:05:47 GMT

using cpopenssl or openssl version 1.1.1,

if using openssl 3.x that will cause password error

Re: Incorrect password when importing SSL certificate into Mobile Access blade

RickyDan — Sun, 17 Jul 2022 17:10:06 GMT

So what you're saying is that the CP mgmt server has openssl installed and I should be generating the P12 file on the mgmt server itself?

I assume I have to take the following steps:

Upload certificate file and private key to CP mgmt server.
Use cpopenssl to generate my P12 file.
Import P12 file into Mobile Access blade.

Re: Incorrect password when importing SSL certificate into Mobile Access blade

Jarvis_Lin — Sun, 17 Jul 2022 17:44:00 GMT

mgmt server only has cpopenssl which version is 1.1.1.

your step is correct.

If you want to generate .p12 on third party server, the version of openssl must be 1.1.1 or you get error password is incorrect.

Re: Solved: Incorrect password when importing SSL certificate into Mobile Access blade

Aleksandr_Koles — Fri, 16 Feb 2024 01:07:15 GMT

You can simply add the -legacy option to the command. Tested with OpenSSL 3.0.12 24 Oct 2023.

Re: Incorrect password when importing SSL certificate into Mobile Access blade

Oliver_Fink — Tue, 14 May 2024 16:18:16 GMT

Thanks for nothing, Check Point. Using pre-historic versions… 😡

I do this veeery rarely and it took me nearly an hour, before I consulted Google. Looked for an error on my side, stupid me. I should have known better… 😤

Re: Solved: Incorrect password when importing SSL certificate into Mobile Access blade

Emil_T — Mon, 02 Sep 2024 14:11:20 GMT

This is how it worked for me with windows OS only and without the use of openssl or cpopenssl:

Assuming you already have the certificate with private key in windows certificates store

Export the certificate with private key from windows to this format 'TripleDES-SHA1' (Not 'AES256-SHA256').

This will create a .pfx file.

Rename the file to .p12
Import the .p12 file to CheckPoint