Skip to main content
abdulrazak
New Member
January 13, 2017
Question

ssl certificate password

  • January 13, 2017
  • 1 reply
  • 16260 views

Hi all,

I am trying to get a certificate password from my fortigate unit. any one knows how to decrypt that password stored

command i used

sh vpn certificate local

In that my certificate password is there.

 

    1 reply

    xsilver_FTNT
    Staff
    Staff
    January 17, 2017

    Hi abdulrazak,

     

    as you might realized, each time you save config backup, those passwords (set secret ..) changes the strings.

    That's because those are salted and then encrypted to protect those exactly against what you are trying to achieve .. clear text password retrieval from encrypted form.

    AFAIK it should not be possible.

    emnoc
    New Member
    January 17, 2017

    You  need to 1>  record the private-key passphrase  2> store it in a secure spot 

     

    You will not be able to  retrieve any  password/secrer/passphrase from a  FGT.con file

     

    ken

    abdulrazak
    New Member
    January 18, 2017

    Thanks,

    What if i created csr in my fortigate device and made it CA signed, so that i can use it as trusted certificate. That time i need private key and password additionally to add this certificate to another unit, how i will get this password?. I have to use this certificate for ssl inspection. If i add it in the same device in which i created csr, it is added in local certificate, but ssl inspection drop-menu have only local CA certificate. So i need to add this certificate as local CA certificate. kindly suggest one solution