ruyrybeyro / chrootvpn

Checkpoint R80+ VPN client chroot wrapper
Apache License 2.0
135 stars 21 forks source link

cshell_install.sh failed to update certificate #6

Closed furqon closed 2 years ago

furqon commented 2 years ago

Hi @ruyrybeyro thank you for your effort in making this wrapper.

I already succeeded using your script to connect to the vpn. But after the first login it always fails to connect to the vpn. When trying to connect it always asks to update the Mobile Access Portal Agent using cshell_install.sh

At first it failed to update because of the path to the certificate being different Screenshot from 2022-10-08 19-58-22 After updating cshell_install to the correct path where your wrapper is located I have another problem image

Do you know how to fix this? I'm using ubuntu 22.04

Best regards and thank you

ruyrybeyro commented 2 years ago

hi @furqon,

Forgot in the README to say how to launch it, added it now and rewrote README for clarity. vpn.sh also provides instructions, but it is too verbose.

You don't need to deal with cshell_install.sh and snx_install.sh Checkpoint install scripts, the vpn.sh script does that for you upon first install. Don't follow the portal web instructions on that respect. Also Mobile Portal and cshell warnings/errors errors can be "misleading", as the environment for it is inside the chroot and not the "host" OS.

That portal message is rather unfortunate, as it is also showed when the service/CShell agent is not running.

After a reboot, for starting the cshell agent, you run:

vpn.sh start

You can also add for your /etc/sudoers the line for "vpn.sh start" to to be issued automatically upon xorg sofia user login, depending on vpn.sh location:

sofia ALL=(ALL:ALL) NOPASSWD: /usr/bin/vpn.sh or sofia ALL=(ALL:ALL) NOPASSWD: /usr/local/bin/vpn.sh

Best regards

furqon commented 2 years ago

thank you, it work!

ruyrybeyro commented 2 years ago

@furqon Glad to know it works. Deleted your portal image from your post, I was able to reconstruct your web portal URL using it + public information using Google.

furqon commented 2 years ago

thank you very much @ruyrybeyro