Problem with loading a CA's CRL in Cisco IOS
Markus Hofmann
markus at hofmar.de
Wed Oct 20 03:37:34 EDT 1999
Hello!
I have a Netscape Certificate Server (4.1 Solaris) and a Cisco 2600
(with IOS IP Plus IPSEC, 12.0.6 LD).
At the time I have to use the "crl optional" command in my crypto ca to
establish a ipsec connection, because the requesting the CRL do not
work. Here's there error I've got, when requesting the CRL:
(Attention - very long ;-))
------------------------ snip --------------------------------
home-vpn(config)#crypto ca crl request myCA
home-vpn(config)#
Oct 20 09:00:11 MET: Write out getcrl content:119
Oct 20 09:00:11 MET: 30 75 30 70 31 0B 30 09 06 03 55 04 06 13 02 44 45
31 0F 30
Oct 20 09:00:11 MET: 0D 06 03 55 04 08 13 06 48 65 73 73 65 6E 31 11 30
0F 06 03
Oct 20 09:00:11 MET: 55 04 07 13 08 4B 72 6F 6E 62 65 72 67 31 0E 30 0C
06 03 55
Oct 20 09:00:11 MET: 04 0A 13 05 42 72 61 75 6E 31 0F 30 0D 06 03 55 04
0B 13 06
Oct 20 09:00:11 MET: 46 49 54 53 2D 33 31 1C 30 1A 06 03 55 04 03 13 13
42 52 41
Oct 20 09:00:11 MET: 55 4E 20 46 49 54 53 2D 33 20 56 50 4E 20 43 41 02
01 01
Oct 20 09:00:11 MET: Enveloped Data ...
Oct 20 09:00:11 MET: 30 80 06 09 2A 86 48 86 F7 0D 01 07 03 A0 80 30 80
02 01 00
Oct 20 09:00:11 MET: 31 80 30 82 01 0C 02 01 00 30 75 30 70 31 0B 30 09
06 03 55
Oct 20 09:00:11 MET: 04 06 13 02 44 45 31 0F 30 0D 06 03 55 04 08 13 06
48 65 73
Oct 20 09:00:11 MET: 73 65 6E 31 11 30 0F 06 03 55 04 07 13 08 4B 72 6F
6E 62 65
Oct 20 09:00:11 MET: 72 67 31 0E 30 0C 06 03 55 04 0A 13 05 42 72 61 75
6E 31 0F
Oct 20 09:00:11 MET: 30 0D 06 03 55 04 0B 13 06 46 49 54 53 2D 33 31 1C
30 1A 06
Oct 20 09:00:11 MET: 03 55 04 03 13 13 42 52 41 55 4E 20 46 49 54 53 2D
33 20 56
Oct 20 09:00:11 MET: 50 4E 20 43 41 02 01 01 30 0D 06 09 2A 86 48 86 F7
0D 01 01
Oct 20 09:00:11 MET: 01 05 00 04 81 80 38 8E E6 CD 3E 4F 6C 46 7E 3C 17
7B BA 9B
Oct 20 09:00:11 MET: 6F 44 89 67 1A C9 6C 5B B5 D9 37 6B 09 38 AD 88 71
35 84 FF
Oct 20 09:00:11 MET: 1B 20 AF B2 C3 E3 31 78 A2 9D 8A 43 53 1D 95 7C BA
5C DD 95
Oct 20 09:00:11 MET: 60 59 18 DA B4 BE F6 7C 95 7B 34 B1 A9 8A 99 04 82
75 8F 92
Oct 20 09:00:11 MET: 0A 45 EE B1 43 25 74 0B 9A E7 26 9A 99 47 5E A8 F0
C4 1E 4F
Oct 20 09:00:11 MET: ED 27 8E 47 F6 5A 5D 67 03 72 4F 60 AE 7C E5 88 40
A9 96 E7
Oct 20 09:00:11 MET: 1A AE 54 67 2F 98 29 C0 6E 3A 27 25 8C 78 00 00 30
80 06 09
Oct 20 09:00:11 MET: 2A 86 48 86 F7 0D 01 07 01 30 11 06 05 2B 0E 03 02
07 04 08
Oct 20 09:00:11 MET: CD A4 3A 15 13 BF D2 55 A0 80 04 70 B5 84 99 FF 4D
1E 71 16
Oct 20 09:00:11 MET: E0 6C 90 F5 68 54 16 B2 D7 4C 37 0A C0 23 37 A4 8F
CE 5A 98
Oct 20 09:00:11 MET: BE EF BC 41 87 D7 BA 05 0E DF 76 C4 FC B6 14 57 BD
42 A2 B2
Oct 20 09:00:11 MET: C4 82 4F E6 43 2E 99 F7 44 C1 2E F6 E6 23 C2 A0 25
44 74 62
Oct 20 09:00:11 MET: 6F F7 B3 58 47 E1 C8 04 FA 7C 6D 0F 54 DB B1 23 55
E9 E8 90
Oct 20 09:00:11 MET: 51 10 96 79 F5 E8 F8 0C C8 AB 11 2E DB 9F 99 2C 2D
76 80 D7
Oct 20 09:00:11 MET: 14 CB 7B BA 04 08 D1 BE 84 FB A5 0E 57 3A 00 00 00
00 00 00
Oct 20 09:00:11 MET: 00 00 00 00
Oct 20 09:00:12 MET: Signed Data 1609 bytes
Oct 20 09:00:12 MET: 30 80 06 09 2A 86 48 86 F7 0D 01 07 02 A0 80 30 80
02 01 01
Oct 20 09:00:12 MET: 31 0E 30 0C 06 08 2A 86 48 86 F7 0D 02 05 05 00 30
80 06 09
Oct 20 09:00:12 MET: 2A 86 48 86 F7 0D 01 07 01 A0 80 24 80 04 82 01 D0
30 80 06
Oct 20 09:00:12 MET: 09 2A 86 48 86 F7 0D 01 07 03 A0 80 30 80 02 01 00
31 80 30
Oct 20 09:00:12 MET: 82 01 0C 02 01 00 30 75 30 70 31 0B 30 09 06 03 55
04 06 13
Oct 20 09:00:12 MET: 02 44 45 31 0F 30 0D 06 03 55 04 08 13 06 48 65 73
73 65 6E
Oct 20 09:00:12 MET: 31 11 30 0F 06 03 55 04 07 13 08 4B 72 6F 6E 62 65
72 67 31
Oct 20 09:00:12 MET: 0E 30 0C 06 03 55 04 0A 13 05 42 72 61 75 6E 31 0F
30 0D 06
Oct 20 09:00:12 MET: 03 55 04 0B 13 06 46 49 54 53 2D 33 31 1C 30 1A 06
03 55 04
Oct 20 09:00:12 MET: 03 13 13 42 52 41 55 4E 20 46 49 54 53 2D 33 20 56
50 4E 20
Oct 20 09:00:12 MET: 43 41 02 01 01 30 0D 06 09 2A 86 48 86 F7 0D 01 01
01 05 00
Oct 20 09:00:12 MET: 04 81 80 38 8E E6 CD 3E 4F 6C 46 7E 3C 17 7B BA 9B
6F 44 89
Oct 20 09:00:12 MET: 67 1A C9 6C 5B B5 D9 37 6B 09 38 AD 88 71 35 84 FF
1B 20 AF
Oct 20 09:00:12 MET: B2 C3 E3 31 78 A2 9D 8A 43 53 1D 95 7C BA 5C DD 95
60 59 18
Oct 20 09:00:12 MET: DA B4 BE F6 7C 95 7B 34 B1 A9 8A 99 04 82 75 8F 92
0A 45 EE
Oct 20 09:00:12 MET: B1 43 25 74 0B 9A E7 26 9A 99 47 5E A8 F0 C4 1E 4F
ED 27 8E
Oct 20 09:00:12 MET: 47 F6 5A 5D 67 03 72 4F 60 AE 7C E5 88 40 A9 96 E7
1A AE 54
Oct 20 09:00:12 MET: 67 2F 98 29 C0 6E 3A 27 25 8C 78 00 00 30 80 06 09
2A 86 48
Oct 20 09:00:12 MET: 86 F7 0D 01 07 01 30 11 06 05 2B 0E 03 02 07 04 08
CD A4 3A
Oct 20 09:00:12 MET: 15 13 BF D2 55 A0 80 04 70 B5 84 99 FF 4D 1E 71 16
E0 6C 90
Oct 20 09:00:12 MET: F5 68 54 16 B2 D7 4C 37 0A C0 23 37 A4 8F CE 5A 98
BE EF BC
Oct 20 09:00:12 MET: 41 87 D7 BA 05 0E DF 76 C4 FC B6 14 57 BD 42 A2 B2
C4 82 4F
Oct 20 09:00:12 MET: E6 43 2E 99 F7 44 C1 2E F6 E6 23 C2 A0 25 44 74 62
6F F7 B3
Oct 20 09:00:12 MET: 58 47 E1 C8 04 FA 7C 6D 0F 54 DB B1 23 55 E9 E8 90
51 10 96
Oct 20 09:00:12 MET: 79 F5 E8 F8 0C C8 AB 11 2E DB 9F 99 2C 2D 76 80 D7
14 CB 7B
Oct 20 09:00:12 MET: BA 04 08 D1 BE 84 FB A5 0E 57 3A 00 00 00 00 00 00
00 00 00
Oct 20 09:00:12 MET: 00 00 00 00 00 00 00 A0 80 30 82 02 83 30 82 01 EC
A0 03 02
Oct 20 09:00:12 MET: 01 02 02 01 06 30 0D 06 09 2A 86 48 86 F7 0D 01 01
04 05 00
Oct 20 09:00:12 MET: 30 70 31 0B 30 09 06 03 55 04 06 13 02 44 45 31 0F
30 0D 06
Oct 20 09:00:12 MET: 03 55 04 08 13 06 48 65 73 73 65 6E 31 11 30 0F 06
03 55 04
Oct 20 09:00:12 MET: 07 13 08 4B 72 6F 6E 62 65 72 67 31 0E 30 0C 06 03
55 04 0A
Oct 20 09:00:12 MET: 13 05 42 72 61 75 6E 31 0F 30 0D 06 03 55 04 0B 13
06 46 49
Oct 20 09:00:12 MET: 54 53 2D 33 31 1C 30 1A 06 03 55 04 03 13 13 42 52
41 55 4E
Oct 20 09:00:12 MET: 20 46 49 54 53 2D 33 20 56 50 4E 20 43 41 30 1E 17
0D 39 39
Oct 20 09:00:12 MET: 31 30 31 39 31 36 30 33 32 39 5A 17 0D 30 30 31 30
31 38 31
Oct 20 09:00:12 MET: 36 30 33 32 39 5A 30 43 31 41 30 19 06 09 2A 86 48
86 F7 0D
Oct 20 09:00:12 MET: 01 09 08 13 0C 31 39 33 2E 31 37 2E 31 32 36 2E 31
30 24 06
Oct 20 09:00:12 MET: 09 2A 86 48 86 F7 0D 01 09 02 16 17 68 6F 6D 65 2D
76 70 6E
Oct 20 09:00:12 MET: 2E 76 70 6E 2E 62 72 61 75 6E 61 67 2E 64 65 30 81
9F 30 0D
Oct 20 09:00:12 MET: 06 09 2A 86 48 86 F7 0D 01 01 01 05 00 03 81 8D 00
30 81 89
Oct 20 09:00:12 MET: 02 81 81 00 B0 6B 12 5E ED 96 A3 E6 7E 61 8E EC 32
46 7E 3C
Oct 20 09:00:12 MET: C9 99 2B 47 83 60 6E 40 4F C7 D1 AA B2 0B 6C C7 CE
15 84 EA
Oct 20 09:00:12 MET: DF A4 36 78 84 8D 9A CA CE 4D DE 9A 33 73 6C BF 0B
3B EE 19
Oct 20 09:00:12 MET: 3F AF D1 38 04 5B 9F E8 5F 33 C8 93 13 FD CA 91 E7
07 C2 75
Oct 20 09:00:12 MET: 6D E5 24 D4 42 37 CE 58 EC 86 E4 9A 13 08 28 4A 0C
F7 C2 24
Oct 20 09:00:12 MET: 7A 06 F7 F3 39 F9 89 E8 B3 69 B3 F1 73 83 28 E0 EC
88 AA 23
Oct 20 09:00:12 MET: 87 77 BC 0E E1 FB 06 BD 98 03 E0 27 02 03 01 00 01
A3 5A 30
Oct 20 09:00:12 MET: 58 30 0B 06 03 55 1D 0F 04 04 03 02 07 80 30 28 06
03 55 1D
Oct 20 09:00:12 MET: 11 04 21 30 1F 82 17 68 6F 6D 65 2D 76 70 6E 2E 76
70 6E 2E
Oct 20 09:00:12 MET: 62 72 61 75 6E 61 67 2E 64 65 87 04 C1 11 7E 01 30
1F 06 03
Oct 20 09:00:12 MET: 55 1D 23 04 18 30 16 80 14 F9 CD DD 87 3E 0C B2 10
23 94 9F
Oct 20 09:00:12 MET: BE 05 65 11 FF D6 53 BC 28 30 0D 06 09 2A 86 48 86
F7 0D 01
Oct 20 09:00:12 MET: 01 04 05 00 03 81 81 00 A6 F1 36 60 57 7F BE 90 C0
2A 96 39
Oct 20 09:00:12 MET: 25 A9 CC 85 F1 7A A3 CC 54 C8 68 F9 8B C1 CE 75 16
84 2A 29
Oct 20 09:00:12 MET: 99 21 20 95 6A E3 3B 7E 4A 5B 36 5B 4F 17 5F E4 68
3C 4F 3A
Oct 20 09:00:12 MET: 9C 51 48 8F 5F C6 8A D1 02 F4 DD 48 BF 09 52 76 E3
C9 86 2F
Oct 20 09:00:12 MET: 91 58 7C 32 96 0F 99 F5 E4 6F 43 24 82 E0 E6 A1 2A
50 66 03
Oct 20 09:00:12 MET: 22 BD 38 1A 04 71 9D 98 3B 67 72 5C 72 72 16 17 FE
2F 9F CB
Oct 20 09:00:12 MET: 46 1A F1 5D FA 2C 3C 4F E9 09 04 E3 5B 10 25 42 00
00 31 80
Oct 20 09:00:12 MET: 30 82 01 A1 02 01 01 30 75 30 70 31 0B 30 09 06 03
55 04 06
Oct 20 09:00:12 MET: 13 02 44 45 31 0F 30 0D 06 03 55 04 08 13 06 48 65
73 73 65
Oct 20 09:00:12 MET: 6E 31 11 30 0F 06 03 55 04 07 13 08 4B 72 6F 6E 62
65 72 67
Oct 20 09:00:12 MET: 31 0E 30 0C 06 03 55 04 0A 13 05 42 72 61 75 6E 31
0F 30 0D
Oct 20 09:00:12 MET: 06 03 55 04 0B 13 06 46 49 54 53 2D 33 31 1C 30 1A
06 03 55
Oct 20 09:00:12 MET: 04 03 13 13 42 52 41 55 4E 20 46 49 54 53 2D 33 20
56 50 4E
Oct 20 09:00:12 MET: 20 43 41 02 01 06 30 0C 06 08 2A 86 48 86 F7 0D 02
05 05 00
Oct 20 09:00:12 MET: A0 81 84 30 11 06 0A 60 86 48 01 86 F8 45 01 09 07
31 03 13
Oct 20 09:00:12 MET: 01 34 30 12 06 0A 60 86 48 01 86 F8 45 01 09 02 31
04 13 02
Oct 20 09:00:12 MET: 32 32 30 18 06 09 2A 86 48 86 F7 0D 01 09 03 31 0B
06 09 2A
Oct 20 09:00:12 MET: 86 48 86 F7 0D 01 07 01 30 1F 06 09 2A 86 48 86 F7
0D 01 09
Oct 20 09:00:12 MET: 04 31 12 04 10 DA AB FE 45 26 AD 13 49 CC 16 73 E4
A5 1A 0B
Oct 20 09:00:12 MET: 0D 30 20 06 0A 60 86 48 01 86 F8 45 01 09 05 31 12
04 10 BC
Oct 20 09:00:12 MET: 0D E5 F3 9A A1 95 55 E5 28 CF DA 01 99 58 C7 30 0D
06 09 2A
Oct 20 09:00:12 MET: 86 48 86 F7 0D 01 01 01 05 00 04 81 80 14 F2 43 20
36 86 C8
Oct 20 09:00:12 MET: F2 AB 95 E9 2F 45 6E FB 47 BE 83 37 B2 9A BA AC EC
14 7B F6
Oct 20 09:00:12 MET: C4 45 68 45 5D 9C 45 B0 B0 94 64 C9 CC 2F 7F F9 95
A7 91 32
Oct 20 09:00:12 MET: E5 24 62 FE 64 08 CA 70 A0 93 05 FD 13 66 07 FC 7C
CF E7 E3
Oct 20 09:00:12 MET: 91 BB CB 41 B7 E1 57 82 D5 48 3B 9D A6 E6 BA 89 9D
15 ED 71
Oct 20 09:00:12 MET: 35 83 F7 7A 0D C9 AA 4C 2C 43 3F 5D 40 9D A8 F8 19
56 D3 0A
Oct 20 09:00:12 MET: 64 CC 27 51 F6 3E C6 4A 3C 54 61 96 1F FC D4 58 90
46 3D 34
Oct 20 09:00:12 MET: 7E 00 00 00 00 00 00 00 00
Oct 20 09:00:12 MET: CRYPTO_PKI: status = 0: failed to create GetCRL
Oct 20 09:00:12 MET: CRYPTO_PKI: transaction GetCRL completed
home-vpn(config)#
----------------------------------------- snap -------------------------
What's wrong? Any ideas? Why the creation failed? Maybe not enough
memory (I have 8MB Flash and 32 MB RAM in my Cisco 2600 like recommended
for this ios release).
yours sincerely
M. Hofmann
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Markus Hofmann Phone: +49 170 2848250
St. Urbanusstr. 15 Fax: +49 9371 2032
E-Mail: hofmann at hofmar.de
63927 Buergstadt SMS-Mail: sms at hofmar.de (Only Subject)
Germany PGP-Keys: look at http://www.hofmar.de
---------------------------------------------------------------------
Only written with 100% recycleable electrons!
****************************************************************
TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com
The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html
We are currently experiencing "unsubscribe" difficulties. If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn at listserv.secnetgroup.com
****************************************************************
More information about the VPN
mailing list