ASN1 OID field in certificate

[AkosBakos]

Hi Mates,

Is there anybody here who has experience with "ASN1 OID" field in certificates?

I wanted to upload a certificate with this field, as inbound certificate, but the SmarConsole gave me a big error: 

Password is ok, etc, etc

Akos

[PhoneBoy]

I see you've also opened a TAC case already.
It is odd that you said this was an inbound certificate and the error message is about an outbound one.

[AkosBakos]

Hi, yes, but after I clarified that.

[HeikoAnkenbrand]

The error you're encountering when uploading a certificate with an ASN1 OID field as an inbound/outbound certificate in SmartConsole could be due to a few potential issues:

1. Certificate Chain Mismatch: Ensure that the certificate chain is correctly configured. If the certificate chain in the SmartConsole does not match the chain of the server handling the certificate, it can cause errors. You may need to delete the existing Certificate Authority object and create a new one with the updated certificate chain. For more details, you can refer to this solution.

2. Unsupported OID: If the certificate contains an unfamiliar or custom critical extension OID, it might not be supported by the system, leading to verification failures. In such cases, you may need to contact Check Point Support to get a Hotfix that addresses this issue. More information can be found here.

3. Certificate Format: Ensure that the certificate is in the correct format and that all required fields are properly filled. Sometimes, errors can occur if the certificate is not formatted correctly or if there are missing fields.

[_Val_]

Hi Heiko, are you using Ai Copilot to generate those answers? 🙂

[HeikoAnkenbrand]

@_Val_

I am currently programming a SmartConsole plugin to integrate the Check Point Ai Copilot, Microsoft Ai Copilot and ChatGPT onprem. The only problem is that I always have to generate an API key for all Ai's, which cannot simply be integrated into the SmartConsole. I think that the API keys make it impossible to simply integrate this into the SmartConsole. Therefore I cannot make the SmartConsole-Plugin public.

---
PS:

So I tested it with this article 😉

As the answer sounded good, I have adapted it a little and published it.

[_Val_]

I saw your other posts that looked like  CP AI Copilot too 🙂

It would help if you added a note when AI was involved—just a suggestion.

[PhoneBoy]

There's a reason I have @CheckMatesAI include a disclaimer. 😉