Location of crypt.def file

[Jpstu]

In an environment with a gateway on R80.20 Take 220 and a VM Management server on 80.40 Take 173, we cannot find the correct crypt.def file.  The 80.40 Management Administration guide shows the location as /opt/CPR8040CMP-R80.40/lib/crypt.def, but this location does not exist on our server:

Was there a change to this that we are unaware of?  Does anyone know where we would find the correct crypt.def file?

Thanks

[the_rock]

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

This is from R81.20 mgmt server, but its exact same thing on yours, just replace R81.20 with R80.40

Andy

[Expert@QUANTUM-MANAGEMENT:0]# cd $FWDIR/lib
[Expert@QUANTUM-MANAGEMENT:0]# pwd
/opt/CPsuite-R81.20/fw1/lib
[Expert@QUANTUM-MANAGEMENT:0]# ls -lh crypt.def
-rw-r----- 1 admin bin 12K Nov 16 06:21 crypt.def
[Expert@QUANTUM-MANAGEMENT:0]#

[Jpstu]

Hi,

We did try that one but changes made to it do not propagate to the gateway.  The R80.40 Security Management Administration guide shows that for an 80.40 Management server and an 80.20 gateway the file should be /opt/CPR8040CMP-R80.40/lib/crypt.def but this location is not present at all.  Even when we set up a Lab to investigate on a fresh install this directory was not created.  

[the_rock]

I never had that problem in my old R80.40 mgmt server, something makes no sense. What happens if you do this from mgmt server ssh expert mode:

cd $FWDIR/lib

ls -lh crypt*

[Jpstu]

Yes, we find it a bit confusing as well, the output from the above command is :

12 -rw-r----- 1 admin bin 12233 Jan 16 14:17 crypt.def
4 -rw-r----- 1 admin bin 821 Apr 16 2020 crypt_ssl.def

but we also found this:

Expert@SMS80.40:0]# find / -name crypt.def
find: /proc/36863/task/92966: No such file or directory
find: /proc/92970: No such file or directory
/opt/CPsuite-R80.40/fw1/lib/crypt.def
/opt/CPR7520CMP-R80.40/lib/crypt.def
/opt/CPR7540CMP-R80.40/lib/crypt.def
/opt/CPR76CMP-R80.40/lib/crypt.def
/opt/CPSFWR77CMP-R80.40/lib/crypt.def
/opt/CPSFWR80CMP-R80.40/lib/crypt.def
/opt/CPR77CMP-R80.40/lib/crypt.def
/opt/CPR75CMP-R80.40/lib/crypt.def
/opt/CPNGXCMP-R80.40/lib/crypt.def
/opt/CPSG80CMP-R80.40/lib/crypt.def
/opt/CPR71CMP-R80.40/lib/crypt.def
/opt/CPSG80R75CMP-R80.40/lib/crypt.def

This aligns with what the admin guide shows but does not include the file for an 80.20 gateway.

[the_rock]

Thats not what I asked though 🙂

Do this:

cd $FWDIR/lib

ls -lh crypt*

[Jpstu]

Sorry, I put it at the top of the last reply but did not include the full command:

[Expert@SMS80.40:0]# cd $FWDIR/lib
[Expert@SMS80.40:0]# pwd
/opt/CPsuite-R80.40/fw1/lib
[Expert@SMS80.40:0]# ls -lh crypt*
-rw-r----- 1 admin bin 12K Jan 16 14:17 crypt.def
-rw-r----- 1 admin bin 821 Apr 16 2020 crypt_ssl.def

[_Val_]

Make changes in $FWDIR/lib/crypt.def and see if it helps. Backup the file first.

[G_W_Albrecht]

See in https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_SecurityManagement_AdminGuid...

Version of the Target Security Gateway	Location of the File
R80.40	/opt/CPsuite-R80.40/lib/crypt.def
R80.30	/opt/CPR8040CMP-R80.40/lib/crypt.def
R80.20SP on Maestro, or Scalable Chassis	/opt/CPR8040CMP-R80.40/lib/crypt.def
R80.20	/opt/CPR8040CMP-R80.40/lib/crypt.def

[Jpstu]

Thank you for your reply.  The problem we have is that there is no /opt/CPR8040CMP-R80.40/lib/ directory on the SMS even though the documentation show that there should be.  When we set up a lab with an 80.40 Management server and an 80.20 gateway, it didn't have that directory either.

[the_rock]

I would check with TAC, because that simply makes no sense.