How to install SNX Checkpoint VPN client in Fedora 33

install-snx-checkpoint

### Install few required packages to run SNX
sudo dnf install -y java-1.8.0-openjdk.x86_64 icedtea-web.x86_64 libstdc++.i686 libX11.i686 libpamtest.i686 libnsl.i686

### Download compat-libstdc++ driver and install it
wget http://mirror.centos.org/centos/7/os/x86_64/Packages/compat-libstdc++-33-3.2.3-72.el7.i686.rpm
sudo dnf -y install compat-libstdc++-33-3.2.3-72.el7.i686.rpm

### Install snx_linux.sh
### Download snx_linux_30.sh file from Checkpoint
### Active URL : https://supportcenter.checkpoint.com/supportcenter/portal/user/anon/page/default.psml/media-type/html?action=portlets.DCFileAction&eventSubmit_doGetdcdetails&fileid=22824
### or Alternative URL: wget https://vpnportal.aktifbank.com.tr/SNX/INSTALL/snx_install.sh
sh snx_install_linux30.sh

### Connect to VPN
snx -s <servername> -u <username>
## Input for prompted password

Hello @pfcouto , My script already installed all the components needed in a chroot, it was built for not having to deal with the snx/cshell requirements, which can't even be normally met nowadays in Fedora, for instance. Just visit https://localhost:14186 and accept the certificates. It is pretty unfortunate the mobile portal showing that message when self signed localhost certificates are not recognized by the browser. It was never my intention hijacking this thread, for doubs, requests and documentation I recommend any future people to visit my github at httts:// github.com/ruyrybeyro/chrootvpn

…

On Mon, Nov 28, 2022, 23:59 Pedro Couto ***@***.***> wrote: ***@***.**** commented on this gist. ------------------------------ Hello @ruyrybeyro <https://github.com/ruyrybeyro>, can you help me out? Managed to get here using your script. However I don't know how to install certutil. [image: image] <https://user-images.githubusercontent.com/69256195/204405644-02129936-3d39-4182-b685-bbbbe357faa9.png> — Reply to this email directly, view it on GitHub <https://gist.github.com/b88b8f32eacd2e39c11cb52b6f0b5ba2#gistcomment-4384281> or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACPDBP3B2QYVXFJ2QRFBXD3WKVBP7BFKMF2HI4TJMJ2XIZLTSKBKK5TBNR2WLJDHNFZXJJDOMFWWLK3UNBZGKYLEL52HS4DFQKSXMYLMOVS2I5DSOVS2I3TBNVS3W5DIOJSWCZC7OBQXE5DJMNUXAYLOORPWCY3UNF3GS5DZVRZXKYTKMVRXIX3UPFYGLK2HNFZXIQ3PNVWWK3TUUZ2G64DJMNZZDAVEOR4XAZNEM5UXG5FFOZQWY5LFVEYTANRRG4YTONBTU52HE2LHM5SXFJTDOJSWC5DF> . You are receiving this email because you were mentioned. Triage notifications on the go with GitHub Mobile for iOS <https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675> or Android <https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub> .

@pfcouto , I answered reading the email and not the edited version.

It seems DNS is not being resolved. I would recommend detailing the Linux distro, sending me a vpn.sh status, and a ls -la /etc/resolv.conf + a cat /etc/resolv.conf with the vpn on. please open an issue in my github or send me an email

As it is a DNS isssue, you can reach VMs via IP address. As for the site, it might depend on routing too.

sudo dnf install -y java-1.8.0-openjdk.x86_64 icedtea-web.x86_64 libstdc++.i686 libX11.i686 libpamtest.i686 libnsl.i686
sudo wget https://linuxsoft.cern.ch/cern/centos/7/updates/x86_64/Packages/Packages/compat-libstdc++-33-3.2.3-72.el7.i686.rpm
sudo dnf -y compat-libstdc++-33-3.2.3-72.el7.i686.rpm

Now it's::

https://support.checkpoint.com/results/download/22824

Now it's::

sudo ./snx_install_linux30.sh

Now it's:

snx -s servername -u username

Or we'll do automation. The problem with sns is that there is no place for a password in its configuration and it must be entered regularly by yourself. I solved this problem this way: create a production file in the home directory.sh and fill it out. Don't forget to create the .snxrc configuration file.

cd
touch ~/production.sh

Then put this in file:

spawn snx
expect "Please enter your password:"
sleep 2
send "HERE YOU PASSWORD"
interact

Then:

sudo dnf install expect
chmod +x ./production.sh

Create links for easy connection:

If bash.

echo "alias csnx='sudo ~/production.sh'" >> ~/.bashrc
echo "alias esnx='sudo snx -d'" >> ~/.bashrc

If zsh.

echo "alias csnx='sudo ~/production.sh'" >> ~/.zshrc
echo "alias esnx='sudo snx -d'" >> ~/.zshrc