Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Kolafer
Contributor

Replace TLS cert

Hello all,

did someone already replace the TLS cert in skyline configuration? 

The certificate was changed on our Prometheus server. 

Is it possible to use the Issuing CA, and not the cert of the  Prometheus server, in ther configuration?

"enabled": true,
            "server-auth": {
                "ca-public-key": {
                    "type": "PEM-X509",
                    "value": "<CERTIFICATE>"

 
Or what would be the best way, if the certificate of Prometheus will replace every 2,5 years? 

What are the steps, if we need to replace the cerificate for the Skyline TLS configuration?

Thanks


0 Kudos
4 Replies
_Val_
Admin
Admin

@Arik_Ovtracht can you please advise?

0 Kudos
Kolafer
Contributor

Hello @Arik_Ovtracht ,

can you advise here please?

I created a new payloadjson and add the issuer CA of the Prometheus server, after rerun the configuration again. But still not working. 

I can see the certificate was added to the certs/ca-bundle.crt. 

br


What are the right steps to replace the certificate on the gateway? 


0 Kudos
Elad_Chomsky
Employee
Employee

Hi @Kolafer , Please open a support ticket to CheckPoint, so we can try to assist you directly.

0 Kudos
Elad_Chomsky
Employee
Employee

Hi @Kolafer , As far as I know the issuer CA should work on the GW itself, so it should prevent you from the need to do redeployment ( Assuming the Prometheus CA is signed by it ). 

Regarding automatic deployment of certificates, there are some available solutions outside of CheckPoint, that can be used, but as this is out of scope of the CheckPoint support, I can share them, However I can't recommend to go to one or to the other. For example, CertBot or kubernetes based solutions.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events