topic Re: Created new certificate for decrypt, now I can't commit because of global protect error in General Topics

Created new certificate for decrypt, now I can't commit because of global protect error

WelsQQ — Mon, 27 Mar 2017 11:14:56 GMT

Hello everyone,

I created a new certificate for SSL proxy and now for some reason I cannot commit. The error I get is "error applying transform globalprotect-pre-transform.xsl to config tree", AFAIK there was/is a completely different certificate for global protect connections.

Does anyone have a clue where I should start to search for the problem?

Re: Created new certificate for decrypt, now I can't commit because of global protect error

BPry — Mon, 27 Mar 2017 14:48:13 GMT

Do you recieve the error if you remove the new certificate? In essence have you narrowed it down to the actual cert and not an error that actually happened with the last commit before you tried to add the new cert into the config?

Re: Created new certificate for decrypt, now I can't commit because of global protect error

WelsQQ — Tue, 28 Mar 2017 13:25:56 GMT

Hi, thank you for your response.

I Rolled back to the current running configuration, and if I try to validate without any changes done I get the same error, "error applying transform globalprotect-pre-transform.xsl to config tree ( module: device)"

Additionally I get an error about certificate chain for the current ssl-proxy certificate in use, if I up the rootCA cert to the device and I get rid of this error but the first error still stands.

2 things I find kinda ridiculous about this, error when trying to commit running-configuration without any changes and how uninformative that globalprotect error is..

Though I just found out that the device has support left so I'll pass this problem to palo alto support when I have time.