Mobile Access Agent for Linux "Cannot Delete Certificates"

[AlfredoH]

Hello everyone!

I'm having a problem while installing the Mobile Access Portal agent to connect to the VPN. I'm working on Ubuntu 21.10, I already installed everything from this site: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

I have to install the agent but when I run it using "sudo bash cshell_install.sh" I receive this as output:

Start Check Point Mobile Access Portal Agent installation
Extracting Mobile Access Portal Agent... Done
Installing Mobile Access Portal Agent...
Cannot delete certificates. Installation aborted.

And I can't find any solution. Any suggestions?

Thank you in advance!

[huangsoul]

I am having the exact problem. Ubuntu 20.04. Any one can help?

[RuiRibeiro]

see my post for an automated solution https://community.checkpoint.com/t5/Remote-Access-VPN/CShell-SNX-chrooted-wrapper-automated-setup-fo...

[Maxno]

I am having the exact problem.
Ubuntu 21.10.
Any one can help?

[RuiRibeiro]

see my post https://community.checkpoint.com/t5/Remote-Access-VPN/CShell-SNX-chrooted-wrapper-automated-setup-fo...

[G_W_Albrecht]

sk120452: Mobile Access Portal Agent fails to install the certificate ?

[Schums]

Someone with Ubuntu 22.04 is also having the same problem with their cshell_install.sh. The error is different from the ones in the link:

certutil: could not find certificate named "CShell_Certificate": SEC_ERROR_BAD_DATABASE: security library: bad database.

or

certutil: function failed: SEC_ERROR_LEGACY_DATABASE: The certificate/key database is in an old, unsupported format.

[RuiRibeiro]

See my post, that error is was one the reasons I wrote a wrapper setup script https://community.checkpoint.com/t5/Remote-Access-VPN/CShell-SNX-chrooted-wrapper-automated-setup-fo...

[davek]

I am having the same issue with a fresh install of Ubuntu 22.04.   I have installed the required Java Runtime Environment, linux tools, and libraries documented here :

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

I am getting the error "Cannot delete certificates. Installation aborted." when running the 'cshell_installation.sh' script. 

Any news or updates ?

[RuiRibeiro]

Hi,

See this post https://community.checkpoint.com/t5/Remote-Access-VPN/CShell-SNX-chrooted-wrapper-automated-setup-fo...

[Oranger]

Using your solution, I'm able to connect once. Reconnect not working. Browser window closes after "Connecting...".

Can connect again only after reinstalling vpn.sh. What am I doing wrong?

[CheckPointerXL]

hello,

did you fix it?

[WanderMaia]

Good evening!

On Linux Mint 21 I installed without any problems, but on ubuntu 22.04 and 22.10 I had the same problem. In the case of ubuntu, as of version 22.04, the firefox browser is distributed in snap format. I suspect the cause is the files being in different locations.

As a workaround, I removed firefox snap and installed firefox .deb and it worked perfectly. Below are the commands to install on ubuntu 22.04 or 21.10 (works on based distributions):

Prerequisites:

Update:

sudo apt update && apt upgrade -y

Install Java (openJDK)

sudo apt install default-jre -y
sudo apt install default-jdk -y

Install packages

sudo apt install software-properties-common apt-transport-https wget curl build-essential xterm libnss3-tools openssl -y

Install Packages (x86)

sudo dpkg --add-architecture i386
sudo apt install libx11-6:i386 libc6:i386 libncurses5:i386 libstdc++6:i386 libstdc++5:i386 libpam0g:i386 -y
sudo apt install binutils-multiarch binutils-multiarch-dev -y

Remove firefox Snap:

sudo snap remove --purge firefox

Install firefox (.deb)

sudo add-apt-repository ppa:mozillateam/ppa
sudo apt update
sudo apt install --target-release 'o=LP-PPA-mozillateam' firefox

Adjust repository priority for firefox

sudo cat << EOF | sudo tee -a /etc/apt/preferences.d/mozillateamppa
Package: firefox*
Pin: release o=LP-PPA-mozillateam
Pin Priority: 501

EOF

Run the scripts

./snx_install.sh
./cshell_install.sh

Access the VPN through chrome (I always do it) and accept the certificate.

Hope this helps.

[Markito]

Hi, 

I have the same problem in ubuntu 22.04, the only thing I did was comment these lines and it is functional.

[asdad]

Modifying .sh breaks data integrity of the script.

[bmg]

To anyone experiencing issues with the official Linux client, you can use snx-rs instead.