Helpful ReplyHot!Let's Encrypt and FortiGate

Page: < 12 Showing page 2 of 2
Author
emnoc
Expert Member
  • Total Posts : 5236
  • Scores: 345
  • Reward points: 0
  • Joined: 2008/03/20 13:30:33
  • Location: AUSTIN TX AREA
  • Status: offline
Re: Let's Encrypt and FortiGate 2019/05/09 09:00:01 (permalink)
0
Yes that true , it made it a lot easier with certificate and applying the  certs for multiple objects.
 
Ken Felix
 

PCNSE,  NSE , Forcepoint ,  StrongSwan Specialist
#21
absmith
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/11/29 11:18:39
  • Status: offline
Re: Let's Encrypt and FortiGate 2019/07/01 10:19:17 (permalink)
0
So I have the functionality in the script to upload the certificate and private-key however, Fortigate functionality doesn't let you overwrite the current certificate, and even if it did you would have to remove and then re-add ssl functionality to the specific service if you are overwriting the certificate.
 
Since this is the case, I'm going to also have to write functionality to change the certificates of rules, VPN portals, Virtual servers, either into the same script or into a separate script.  Let me know if anyone is interested so far.
post edited by absmith - 2019/07/01 10:21:08
#22
cookem
New Member
  • Total Posts : 2
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/04/25 09:46:57
  • Status: offline
Re: Let's Encrypt and FortiGate 2019/07/01 10:23:19 (permalink)
0
sounds cool....can I get a copy of what you have so far?
#23
Keith Nelson
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/06/20 19:09:37
  • Status: offline
Re: Let's Encrypt and FortiGate 2019/07/01 11:11:53 (permalink)
0
adam_smith@sundance.org
So I have the functionality in the script to upload the certificate and private-key however, Fortigate functionality doesn't let you overwrite the current certificate, and even if it did you would have to remove and then re-add ssl functionality to the specific service if you are overwriting the certificate.
 
Since this is the case, I'm going to also have to write functionality to change the certificates of rules, VPN portals, Virtual servers, either into the same script or into a separate script.  Let me know if anyone is interested so far.



I would be interested in the script.
 
I have been trying to figure this out for awhile but im not much of a scripter.
You would think this would be an API they would have given all the rage of DevOPs these days.
#24
emnoc
Expert Member
  • Total Posts : 5236
  • Scores: 345
  • Reward points: 0
  • Joined: 2008/03/20 13:30:33
  • Location: AUSTIN TX AREA
  • Status: offline
Re: Let's Encrypt and FortiGate 2019/07/01 13:25:13 (permalink)
0
 
1: upload the  new cert and then change the useage to the new cert 
 
2: delete the old certificate
 

PCNSE,  NSE , Forcepoint ,  StrongSwan Specialist
#25
absmith
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/11/29 11:18:39
  • Status: offline
Re: Let's Encrypt and FortiGate 2019/07/18 11:30:01 (permalink)
0
there doesn't seem to be a way for me to put the file here but I am planning to put it up on github so that as it evolves people can get the latest versions.  I also am planning on releasing it with an apache v2 license, so don't worry about changing it for your own purposes and any contributions/suggestions would help.  Sorry for taking so long to post it.  I was trying to add a config file functionality that is present in the code but is not fully working yet.  However all the command line options all work.  This is a python script and relies on  fortiosapi so you will have to use that.  It was written with python3 in mind so it may or may not be reverse compatible with python2.  I actually think that it won't be reverse compatible because of the configuration file library I used changed the syntax for the library name when it moved over to python3.  With that in mind here is what I have currently.
 
I am also planning on making it compatible with pypi so you can just do a pip install, but that isn't all in place yet.  I'll post the link as soon as I get it on github.
#26
absmith
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2016/11/29 11:18:39
  • Status: offline
Re: Let's Encrypt and FortiGate 2019/07/26 09:47:57 (permalink)
0
Here is the github-repo for the current version,  it's still a bit early but it does work.  The --help feature should give you all the parameters required.  I'm trying to write it to have a config file as well so that you don't need to write the whole command every time, the beginning framework is there for this in the script but is not fully tested yet so I suggest using the cli commands.  Also this works with either password or API-Key authentication.  Let me know if things aren't working for you.
https://github.com/absmith82/fortitools
post edited by absmith - 2019/08/02 13:47:51
#27
Page: < 12 Showing page 2 of 2
Jump to:
© 2019 APG vNext Commercial Version 5.5