Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
AlfredoH
Explorer

Mobile Access Agent for Linux "Cannot Delete Certificates"

Hello everyone!

I'm having a problem while installing the Mobile Access Portal agent to connect to the VPN. I'm working on Ubuntu 21.10, I already installed everything from this site: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

I have to install the agent but when I run it using "sudo bash cshell_install.sh" I receive this as output:

Start Check Point Mobile Access Portal Agent installation
Extracting Mobile Access Portal Agent... Done
Installing Mobile Access Portal Agent...
Cannot delete certificates. Installation aborted.

And I can't find any solution. Any suggestions?

Thank you in advance!

0 Kudos
13 Replies
huangsoul
Explorer

I am having the exact problem. Ubuntu 20.04. Any one can help?

 

0 Kudos
RuiRibeiro
Contributor

0 Kudos
Maxno
Explorer

I am having the exact problem.
Ubuntu 21.10.
Any one can help?

0 Kudos
RuiRibeiro
Contributor

0 Kudos
G_W_Albrecht
Legend Legend
Legend

sk120452: Mobile Access Portal Agent fails to install the certificate ?

CCSP - CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist
0 Kudos
Schums
Explorer

Someone with Ubuntu 22.04 is also having the same problem with their cshell_install.sh. The error is different from the ones in the link:

certutil: could not find certificate named "CShell_Certificate": SEC_ERROR_BAD_DATABASE: security library: bad database.

or

certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format.

unknown

0 Kudos
RuiRibeiro
Contributor

See my post, that error is was one the reasons I wrote a wrapper setup script https://community.checkpoint.com/t5/Remote-Access-VPN/CShell-SNX-chrooted-wrapper-automated-setup-fo...

0 Kudos
davek
Explorer

I am having the same issue with a fresh install of Ubuntu 22.04.   I have installed the required Java Runtime Environment, linux tools, and libraries documented here :

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

I am getting the error "Cannot delete certificates. Installation aborted." when running the 'cshell_installation.sh' script. 

Any news or updates ?

0 Kudos
RuiRibeiro
Contributor

0 Kudos
Oranger
Explorer

Using your solution, I'm able to connect once. Reconnect not working. Browser window closes after "Connecting...".

Can connect again only after reinstalling vpn.sh. What am I doing wrong?

0 Kudos
CheckPointerXL
Advisor
Advisor

hello,

did you fix it?

0 Kudos
WanderMaia
Explorer

Good evening!

On Linux Mint 21 I installed without any problems, but on ubuntu 22.04 and 22.10 I had the same problem. In the case of ubuntu, as of version 22.04, the firefox browser is distributed in snap format. I suspect the cause is the files being in different locations.

As a workaround, I removed firefox snap and installed firefox .deb and it worked perfectly. Below are the commands to install on ubuntu 22.04 or 21.10 (works on based distributions):


Prerequisites:

Update:

sudo apt update && apt upgrade -y


Install Java (openJDK)

sudo apt install default-jre -y
sudo apt install default-jdk -y


Install packages


sudo apt install software-properties-common apt-transport-https wget curl build-essential xterm libnss3-tools openssl -y


Install Packages (x86)


sudo dpkg --add-architecture i386
sudo apt install libx11-6:i386 libc6:i386 libncurses5:i386 libstdc++6:i386 libstdc++5:i386 libpam0g:i386 -y
sudo apt install binutils-multiarch binutils-multiarch-dev -y


Remove firefox Snap:


sudo snap remove --purge firefox


Install firefox (.deb)


sudo add-apt-repository ppa:mozillateam/ppa
sudo apt update
sudo apt install --target-release 'o=LP-PPA-mozillateam' firefox

 

Adjust repository priority for firefox


sudo cat << EOF | sudo tee -a /etc/apt/preferences.d/mozillateamppa
Package: firefox*
Pin: release o=LP-PPA-mozillateam
Pin Priority: 501

EOF


Run the scripts


./snx_install.sh
./cshell_install.sh


Access the VPN through chrome (I always do it) and accept the certificate.


Hope this helps.

0 Kudos
Markito
Explorer

Hi, 

I have the same problem in ubuntu 22.04, the only thing I did was comment these lines and it is functional.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events