Installing SSL Certificate(s) on IOS

Post a reply


In an effort to prevent automatic submissions, we require that you complete the following challenge.
Smilies
:D :) ;) :( :o :shock: :? 8-) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :!: :?: :idea: :arrow: :| :mrgreen: :geek: :ugeek:

BBCode is ON
[img] is ON
[flash] is OFF
[url] is ON
Smilies are ON

Topic review
   

Expand view Topic review: Installing SSL Certificate(s) on IOS

Re:Installing SSL Certificate(s) on IOS

by Guest » Sat Jan 08, 2011 5:02 pm

True. It is because that only recently that many CA vendors have changed their hierarchy. The same issue should not have affected the ASA though.

Re:Installing SSL Certificate(s) on IOS

by Guest » Sat Jan 08, 2011 3:52 pm

Hi Rahqovin, Much appreciation for your assistance. What you recommended pointed to the solution. This procedure is not very well documented on the web at all. Thanks,-BR

Re:Installing SSL Certificate(s) on IOS

by Guest » Sat Jan 08, 2011 2:40 pm

Hi , If you have multiple CA certs, you need to authenticate the trustpoint containing the identity certs using the immediate intermediate cert and then use other trustpoints to import the  other CA certs one by one. So basically,we need to follow the following configuration to import the 3 CA certificate and the Identity certificate on the router:1.  Create root trustpoint

Installing SSL Certificate(s) on IOS

by Guest » Sat Jan 08, 2011 2:26 pm

Having an issue with an SSL certificate DigiCert on a Cisco 2811 running IOS 124-24.T4. I can get the certificate(s), intermediate and server certs installed fine unsing the one trustpoint created. And the ssl website works fine for IE browsers, but other browser types get errors. When I do an SSL cert check it shows that the "The server is not sending the requied intermediate certificate" (see attachment). I feel like I have followed what documentaiton is available correctly. Any suggestions is greatly appreciated. This is the best directions I could find to follow. They are specifically for go-daddy certs but I think it would be the same process for any.http://bytesolutions.com/Support/Knowle ... g-CLI.aspx Thanks,BR

Top