Microsoft Windows
Sun Solaris
Check Point Firewall
Unable to request Certificate for a Check Point Firewall through PKCS10 request in RSA Certificate Manager.
When submitting a PKCS10 request from Check Point Firewall through the enrollment page, the following error appears after clicking the Submit button:
!PKCS10Parse(): [XrcDECODINGFAILURE] unable to complete decoding operation. XudaParsePKCS10Request(): [XrcDECODINGFAILURE: unable to complete decoding operation]
When generating the request in Check Point Firewall, there is an option to include alternative name information.
ex: IP address. You select the checkbox and the option you require. This information is put in as part of the subject Alternative Name.
When using an ASN.1 Editor to view the request, the Subject Alternative Name portion appears as follows:
243 31 22: SET {
245 30 20: SEQUENCE {
247 30 18: SEQUENCE {
249 06 3: OBJECT IDENTIFIER subjectAltName (2 5 29 17)
254 01 1: BOOLEAN FALSE <----------------------
257 04 8: OCTET STRING
: 30 06 87 04 3E B0 3F 28
The line that includes BOOLEAN FALSE should not be included in that part of the request as it is an invalid format. This causes the decoding failure.
Related Articles
Some buttons in "Cloud Authentication Service Configuration" are not worked with Internet Explorer in Authentication Manag… 4Number of Views How to retrieve the CT Server info enter into RSA Federated Identity Manager (FIM) GUI within Custom Plugins 2Number of Views How to Install a Third Party Certificate into enVision 12Number of Views Check Point Gateway Mobile Access Portal - RADIUS Configuration for Cloud Authentication Service - RSA Ready Implementatio… 34Number of Views IDR publish fails with error certificate failure after enabling the SSO on the IDR cluster it fails to publish. 39Number of Views
Trending Articles
How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device Reporting on RSA Authentication Manager 8.x users with On-Demand Token, a fixed passcode or a hardware/software token assi… How to Download OTP Token Seed Files from myRSA Anomalix idGenius - SAML Relying Party Configuration - RSA Ready Implementation Guide RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide