-
Problem solved. (SHA512 -> SHA1)
regards Toraten
summary:
problem:
- install CA into CiscoVPN3000
- Install certificate obtained via enrollment :
Error installing identity certificate: Invalid certificate chain.
cause:
- ciscovpn cannot handle certificate which signed with sha256 (like windows...)
s. [17][18]
solution:
- do sign each! certificate (in this ch.
2009-03-09 16:39:27 UTC in xca
-
Thank you.
I am already installed all certificate.
Now i create e new request with CN=cisco3030
but cisco give me the same errormessage:
cisco enroll:
cisco3030
rsa1024
pki@fh-mydomain.de
-> pkcs0008.txt vpn3030_8CR.pem
xca: sig: cavpn
export PEM -> cisco3030.crt
cisco install:
-> Error installing identity certificate: Invalid certificate chain.
List ins.
2009-03-02 20:57:30 UTC in xca
-
Thank you.
You can find test-certificates on:
http://www-home.fh-lausitz.de/~tlehmann/tmp/090302.testcavpn/
notes on: descr.txt
Regards Torsrten.
2009-03-02 18:30:21 UTC in xca
-
sorry s/foo/mydomain/ was incomplete...
Torsten.
2009-03-02 05:19:58 UTC in xca
-
Hallo,
I'm trying to install CA into CiscoVPN3000 for many months...
I used the guide of innominate [1].
[1] http://www.innominate.de/images/stories/documents/interop/Interop_mGuard_Cisco3000.pdf
- Step 4: Sign the certificate request with the CA using XCA
...
- export CRT as PEM
- Step 5: Import of the signed Cisco certificate on the Cisco device
- Install certificate obta.
2009-03-01 20:51:51 UTC in xca
