Checkpoint CShell/SNX VPN client chrooted wrapper setup - ba

[ruyrybeyro]

Hi,

The pure command line setup of the Linux Checkpoint VPN client, with a special edition of SNX, has already stopped working a couple of years ago with the discontinuation of SSLv3 support by Checkpoint.

Also around that time, the Java agent stopped being an applet in the browser, and became a Java servlet running on the client.

These setups are typically problematic with the various versions of Checkpoint installation scripts, dependencies are not always easy to satisfy, require 32-bit libraries, and in many distributions/versions these dependencies no longer exist. Officially it is only supported a couple of obsolete releases of Ubuntu, OpenSUSE, RHEL and Fedora.

Here is my script that isolates the client/agent/32-bit setup in a chroot, and has been successfully tested with many distributions, including Mageia.

https://github.com/ruyrybeyro/chrootvpn

Feedback is welcome.

Regards,