Changing Multiportal Certificate via API or script (let's encrypt)

[Jan_Kleinhans]

Hello,

we are using an official purchased wildcard certificate for the Identity Portal and Mobile Access.

Is there any way to change the certificate without usind the SmartConsole (R80.10).

That would provide the possibility to use let's encrypt certificates which have to be updated every 3 months.

Best Regards,

Jan

[PhoneBoy]

At the moment, not currently.

[Marc_Guyard]

I search the same.

It's not possible with generic_object API ?

[PhoneBoy]

It'd be mostly CLI commands, so you'd be using run-script to do most of the work.

[Marc_Guyard]

Do you have some examples of CLI commands ?

Thanks

[PhoneBoy]

I don't believe the CLI commands are documented for this, and will admit I don't know offhand.

We'll have to consult with the experts.

[Uriel_Fleischma]

Hi Marc & Daemon,

We currently do not have that functionality in the SmartCenter, we will support this in future versions, but we do not have a specific date/version for when this will be supported.

[Sigbjorn]

Any new information about certificate management through CLI or API ?

[Sigbjorn]

bump

[Sigbjorn]

Now that certificate expiration will be changed to maximum 13 months, I'd like to bump this thread again.

We are very interested in an API for all certificate management. Being able to automate this process with the ACME protocol would be a great benefit.

[PhoneBoy]

Please socialize this requirement with your local Check Point office.

[Sigbjorn]

I talked with them last week, and wrote an RFE to be submitted. Hopefully someone in Check Point will also see the value in this. 🙂