cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Former Member
Not applicable
Report Inappropriate Content
Message 1 of 5

Global Certificate List import

Hello,

We would like to import Global Certificate List from 6.9 version to 7.2 version by using List converter tool.

Is it possible to do that ? We don't see the certificate for https website.

Do you have a procedure to import the list ?

Thanks for your help !

4 Replies
eelsasser
McAfee Retired
McAfee Retired
Report Inappropriate Content
Message 2 of 5

Re: Global Certificate List import

The trusted CAs are exported using the listConverter under the HTTPSProxy.TrustedCAS:

Capture.jpg

and they are imported into a Certificate Authority list on version 7:

Capture2.jpg

Former Member
Not applicable
Report Inappropriate Content
Message 3 of 5

Re: Global Certificate List import

Hello,


Thanks for your response but I want to import Global Certificate List not the Trusted CA.

Is it possible ?

Thanks

1.png

Former Member
Not applicable
Report Inappropriate Content
Message 4 of 5

Re: Global Certificate List import

Nobody ?

eelsasser
McAfee Retired
McAfee Retired
Report Inappropriate Content
Message 5 of 5

Re: Global Certificate List import

I think I answered this offline via your SE, but for the benefit of everyone else...

The actual certificates in the Global Certificate list do not get stored on MWG 6.x directly. Only the SHA1 thumbprints get stored.

Capture.png

So in order to do something similar, you could create rules that use the hash instead.

Rule Criteria:

SSL.Server.Certificate.SHA1Digest is in list Certificate Hash Whitelist

Capture2.png

and paste the hashes into the appropriate string list.

Capture3.png

You should have the functional equivalent of MWG6 using the SHA1 hashes instead of the entire certificate.

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community