Problem with loading a CA's CRL in Cisco IOS

Markus Hofmann markus at hofmar.de
Wed Oct 20 03:37:34 EDT 1999


Hello!

I have a Netscape Certificate Server (4.1 Solaris) and a Cisco 2600
(with IOS IP Plus IPSEC, 12.0.6 LD).
At the time I have to use the "crl optional" command in my crypto ca to
establish a ipsec connection, because the requesting the CRL do not
work. Here's there error I've got, when requesting the CRL:
(Attention - very long ;-))
------------------------ snip --------------------------------
home-vpn(config)#crypto ca crl request myCA
home-vpn(config)#
Oct 20 09:00:11 MET: Write out getcrl content:119
Oct 20 09:00:11 MET: 30 75 30 70 31 0B 30 09 06 03 55 04 06 13 02 44 45
31 0F 30
Oct 20 09:00:11 MET: 0D 06 03 55 04 08 13 06 48 65 73 73 65 6E 31 11 30
0F 06 03
Oct 20 09:00:11 MET: 55 04 07 13 08 4B 72 6F 6E 62 65 72 67 31 0E 30 0C
06 03 55
Oct 20 09:00:11 MET: 04 0A 13 05 42 72 61 75 6E 31 0F 30 0D 06 03 55 04
0B 13 06
Oct 20 09:00:11 MET: 46 49 54 53 2D 33 31 1C 30 1A 06 03 55 04 03 13 13
42 52 41
Oct 20 09:00:11 MET: 55 4E 20 46 49 54 53 2D 33 20 56 50 4E 20 43 41 02
01 01
Oct 20 09:00:11 MET: Enveloped Data ...

Oct 20 09:00:11 MET: 30 80 06 09 2A 86 48 86 F7 0D 01 07 03 A0 80 30 80
02 01 00
Oct 20 09:00:11 MET: 31 80 30 82 01 0C 02 01 00 30 75 30 70 31 0B 30 09
06 03 55
Oct 20 09:00:11 MET: 04 06 13 02 44 45 31 0F 30 0D 06 03 55 04 08 13 06
48 65 73
Oct 20 09:00:11 MET: 73 65 6E 31 11 30 0F 06 03 55 04 07 13 08 4B 72 6F
6E 62 65
Oct 20 09:00:11 MET: 72 67 31 0E 30 0C 06 03 55 04 0A 13 05 42 72 61 75
6E 31 0F
Oct 20 09:00:11 MET: 30 0D 06 03 55 04 0B 13 06 46 49 54 53 2D 33 31 1C
30 1A 06
Oct 20 09:00:11 MET: 03 55 04 03 13 13 42 52 41 55 4E 20 46 49 54 53 2D
33 20 56
Oct 20 09:00:11 MET: 50 4E 20 43 41 02 01 01 30 0D 06 09 2A 86 48 86 F7
0D 01 01
Oct 20 09:00:11 MET: 01 05 00 04 81 80 38 8E E6 CD 3E 4F 6C 46 7E 3C 17
7B BA 9B
Oct 20 09:00:11 MET: 6F 44 89 67 1A C9 6C 5B B5 D9 37 6B 09 38 AD 88 71
35 84 FF
Oct 20 09:00:11 MET: 1B 20 AF B2 C3 E3 31 78 A2 9D 8A 43 53 1D 95 7C BA
5C DD 95
Oct 20 09:00:11 MET: 60 59 18 DA B4 BE F6 7C 95 7B 34 B1 A9 8A 99 04 82
75 8F 92
Oct 20 09:00:11 MET: 0A 45 EE B1 43 25 74 0B 9A E7 26 9A 99 47 5E A8 F0
C4 1E 4F
Oct 20 09:00:11 MET: ED 27 8E 47 F6 5A 5D 67 03 72 4F 60 AE 7C E5 88 40
A9 96 E7
Oct 20 09:00:11 MET: 1A AE 54 67 2F 98 29 C0 6E 3A 27 25 8C 78 00 00 30
80 06 09
Oct 20 09:00:11 MET: 2A 86 48 86 F7 0D 01 07 01 30 11 06 05 2B 0E 03 02
07 04 08
Oct 20 09:00:11 MET: CD A4 3A 15 13 BF D2 55 A0 80 04 70 B5 84 99 FF 4D
1E 71 16
Oct 20 09:00:11 MET: E0 6C 90 F5 68 54 16 B2 D7 4C 37 0A C0 23 37 A4 8F
CE 5A 98
Oct 20 09:00:11 MET: BE EF BC 41 87 D7 BA 05 0E DF 76 C4 FC B6 14 57 BD
42 A2 B2
Oct 20 09:00:11 MET: C4 82 4F E6 43 2E 99 F7 44 C1 2E F6 E6 23 C2 A0 25
44 74 62
Oct 20 09:00:11 MET: 6F F7 B3 58 47 E1 C8 04 FA 7C 6D 0F 54 DB B1 23 55
E9 E8 90
Oct 20 09:00:11 MET: 51 10 96 79 F5 E8 F8 0C C8 AB 11 2E DB 9F 99 2C 2D
76 80 D7
Oct 20 09:00:11 MET: 14 CB 7B BA 04 08 D1 BE 84 FB A5 0E 57 3A 00 00 00
00 00 00
Oct 20 09:00:11 MET: 00 00 00 00
Oct 20 09:00:12 MET: Signed Data 1609 bytes
Oct 20 09:00:12 MET: 30 80 06 09 2A 86 48 86 F7 0D 01 07 02 A0 80 30 80
02 01 01
Oct 20 09:00:12 MET: 31 0E 30 0C 06 08 2A 86 48 86 F7 0D 02 05 05 00 30
80 06 09
Oct 20 09:00:12 MET: 2A 86 48 86 F7 0D 01 07 01 A0 80 24 80 04 82 01 D0
30 80 06
Oct 20 09:00:12 MET: 09 2A 86 48 86 F7 0D 01 07 03 A0 80 30 80 02 01 00
31 80 30
Oct 20 09:00:12 MET: 82 01 0C 02 01 00 30 75 30 70 31 0B 30 09 06 03 55
04 06 13
Oct 20 09:00:12 MET: 02 44 45 31 0F 30 0D 06 03 55 04 08 13 06 48 65 73
73 65 6E
Oct 20 09:00:12 MET: 31 11 30 0F 06 03 55 04 07 13 08 4B 72 6F 6E 62 65
72 67 31
Oct 20 09:00:12 MET: 0E 30 0C 06 03 55 04 0A 13 05 42 72 61 75 6E 31 0F
30 0D 06
Oct 20 09:00:12 MET: 03 55 04 0B 13 06 46 49 54 53 2D 33 31 1C 30 1A 06
03 55 04
Oct 20 09:00:12 MET: 03 13 13 42 52 41 55 4E 20 46 49 54 53 2D 33 20 56
50 4E 20
Oct 20 09:00:12 MET: 43 41 02 01 01 30 0D 06 09 2A 86 48 86 F7 0D 01 01
01 05 00
Oct 20 09:00:12 MET: 04 81 80 38 8E E6 CD 3E 4F 6C 46 7E 3C 17 7B BA 9B
6F 44 89
Oct 20 09:00:12 MET: 67 1A C9 6C 5B B5 D9 37 6B 09 38 AD 88 71 35 84 FF
1B 20 AF
Oct 20 09:00:12 MET: B2 C3 E3 31 78 A2 9D 8A 43 53 1D 95 7C BA 5C DD 95
60 59 18
Oct 20 09:00:12 MET: DA B4 BE F6 7C 95 7B 34 B1 A9 8A 99 04 82 75 8F 92
0A 45 EE
Oct 20 09:00:12 MET: B1 43 25 74 0B 9A E7 26 9A 99 47 5E A8 F0 C4 1E 4F
ED 27 8E
Oct 20 09:00:12 MET: 47 F6 5A 5D 67 03 72 4F 60 AE 7C E5 88 40 A9 96 E7
1A AE 54
Oct 20 09:00:12 MET: 67 2F 98 29 C0 6E 3A 27 25 8C 78 00 00 30 80 06 09
2A 86 48
Oct 20 09:00:12 MET: 86 F7 0D 01 07 01 30 11 06 05 2B 0E 03 02 07 04 08
CD A4 3A
Oct 20 09:00:12 MET: 15 13 BF D2 55 A0 80 04 70 B5 84 99 FF 4D 1E 71 16
E0 6C 90
Oct 20 09:00:12 MET: F5 68 54 16 B2 D7 4C 37 0A C0 23 37 A4 8F CE 5A 98
BE EF BC
Oct 20 09:00:12 MET: 41 87 D7 BA 05 0E DF 76 C4 FC B6 14 57 BD 42 A2 B2
C4 82 4F
Oct 20 09:00:12 MET: E6 43 2E 99 F7 44 C1 2E F6 E6 23 C2 A0 25 44 74 62
6F F7 B3
Oct 20 09:00:12 MET: 58 47 E1 C8 04 FA 7C 6D 0F 54 DB B1 23 55 E9 E8 90
51 10 96
Oct 20 09:00:12 MET: 79 F5 E8 F8 0C C8 AB 11 2E DB 9F 99 2C 2D 76 80 D7
14 CB 7B
Oct 20 09:00:12 MET: BA 04 08 D1 BE 84 FB A5 0E 57 3A 00 00 00 00 00 00
00 00 00
Oct 20 09:00:12 MET: 00 00 00 00 00 00 00 A0 80 30 82 02 83 30 82 01 EC
A0 03 02
Oct 20 09:00:12 MET: 01 02 02 01 06 30 0D 06 09 2A 86 48 86 F7 0D 01 01
04 05 00
Oct 20 09:00:12 MET: 30 70 31 0B 30 09 06 03 55 04 06 13 02 44 45 31 0F
30 0D 06
Oct 20 09:00:12 MET: 03 55 04 08 13 06 48 65 73 73 65 6E 31 11 30 0F 06
03 55 04
Oct 20 09:00:12 MET: 07 13 08 4B 72 6F 6E 62 65 72 67 31 0E 30 0C 06 03
55 04 0A
Oct 20 09:00:12 MET: 13 05 42 72 61 75 6E 31 0F 30 0D 06 03 55 04 0B 13
06 46 49
Oct 20 09:00:12 MET: 54 53 2D 33 31 1C 30 1A 06 03 55 04 03 13 13 42 52
41 55 4E
Oct 20 09:00:12 MET: 20 46 49 54 53 2D 33 20 56 50 4E 20 43 41 30 1E 17
0D 39 39
Oct 20 09:00:12 MET: 31 30 31 39 31 36 30 33 32 39 5A 17 0D 30 30 31 30
31 38 31
Oct 20 09:00:12 MET: 36 30 33 32 39 5A 30 43 31 41 30 19 06 09 2A 86 48
86 F7 0D
Oct 20 09:00:12 MET: 01 09 08 13 0C 31 39 33 2E 31 37 2E 31 32 36 2E 31
30 24 06
Oct 20 09:00:12 MET: 09 2A 86 48 86 F7 0D 01 09 02 16 17 68 6F 6D 65 2D
76 70 6E
Oct 20 09:00:12 MET: 2E 76 70 6E 2E 62 72 61 75 6E 61 67 2E 64 65 30 81
9F 30 0D
Oct 20 09:00:12 MET: 06 09 2A 86 48 86 F7 0D 01 01 01 05 00 03 81 8D 00
30 81 89
Oct 20 09:00:12 MET: 02 81 81 00 B0 6B 12 5E ED 96 A3 E6 7E 61 8E EC 32
46 7E 3C
Oct 20 09:00:12 MET: C9 99 2B 47 83 60 6E 40 4F C7 D1 AA B2 0B 6C C7 CE
15 84 EA
Oct 20 09:00:12 MET: DF A4 36 78 84 8D 9A CA CE 4D DE 9A 33 73 6C BF 0B
3B EE 19
Oct 20 09:00:12 MET: 3F AF D1 38 04 5B 9F E8 5F 33 C8 93 13 FD CA 91 E7
07 C2 75
Oct 20 09:00:12 MET: 6D E5 24 D4 42 37 CE 58 EC 86 E4 9A 13 08 28 4A 0C
F7 C2 24
Oct 20 09:00:12 MET: 7A 06 F7 F3 39 F9 89 E8 B3 69 B3 F1 73 83 28 E0 EC
88 AA 23
Oct 20 09:00:12 MET: 87 77 BC 0E E1 FB 06 BD 98 03 E0 27 02 03 01 00 01
A3 5A 30
Oct 20 09:00:12 MET: 58 30 0B 06 03 55 1D 0F 04 04 03 02 07 80 30 28 06
03 55 1D
Oct 20 09:00:12 MET: 11 04 21 30 1F 82 17 68 6F 6D 65 2D 76 70 6E 2E 76
70 6E 2E
Oct 20 09:00:12 MET: 62 72 61 75 6E 61 67 2E 64 65 87 04 C1 11 7E 01 30
1F 06 03
Oct 20 09:00:12 MET: 55 1D 23 04 18 30 16 80 14 F9 CD DD 87 3E 0C B2 10
23 94 9F
Oct 20 09:00:12 MET: BE 05 65 11 FF D6 53 BC 28 30 0D 06 09 2A 86 48 86
F7 0D 01
Oct 20 09:00:12 MET: 01 04 05 00 03 81 81 00 A6 F1 36 60 57 7F BE 90 C0
2A 96 39
Oct 20 09:00:12 MET: 25 A9 CC 85 F1 7A A3 CC 54 C8 68 F9 8B C1 CE 75 16
84 2A 29
Oct 20 09:00:12 MET: 99 21 20 95 6A E3 3B 7E 4A 5B 36 5B 4F 17 5F E4 68
3C 4F 3A
Oct 20 09:00:12 MET: 9C 51 48 8F 5F C6 8A D1 02 F4 DD 48 BF 09 52 76 E3
C9 86 2F
Oct 20 09:00:12 MET: 91 58 7C 32 96 0F 99 F5 E4 6F 43 24 82 E0 E6 A1 2A
50 66 03
Oct 20 09:00:12 MET: 22 BD 38 1A 04 71 9D 98 3B 67 72 5C 72 72 16 17 FE
2F 9F CB
Oct 20 09:00:12 MET: 46 1A F1 5D FA 2C 3C 4F E9 09 04 E3 5B 10 25 42 00
00 31 80
Oct 20 09:00:12 MET: 30 82 01 A1 02 01 01 30 75 30 70 31 0B 30 09 06 03
55 04 06
Oct 20 09:00:12 MET: 13 02 44 45 31 0F 30 0D 06 03 55 04 08 13 06 48 65
73 73 65
Oct 20 09:00:12 MET: 6E 31 11 30 0F 06 03 55 04 07 13 08 4B 72 6F 6E 62
65 72 67
Oct 20 09:00:12 MET: 31 0E 30 0C 06 03 55 04 0A 13 05 42 72 61 75 6E 31
0F 30 0D
Oct 20 09:00:12 MET: 06 03 55 04 0B 13 06 46 49 54 53 2D 33 31 1C 30 1A
06 03 55
Oct 20 09:00:12 MET: 04 03 13 13 42 52 41 55 4E 20 46 49 54 53 2D 33 20
56 50 4E
Oct 20 09:00:12 MET: 20 43 41 02 01 06 30 0C 06 08 2A 86 48 86 F7 0D 02
05 05 00
Oct 20 09:00:12 MET: A0 81 84 30 11 06 0A 60 86 48 01 86 F8 45 01 09 07
31 03 13
Oct 20 09:00:12 MET: 01 34 30 12 06 0A 60 86 48 01 86 F8 45 01 09 02 31
04 13 02
Oct 20 09:00:12 MET: 32 32 30 18 06 09 2A 86 48 86 F7 0D 01 09 03 31 0B
06 09 2A
Oct 20 09:00:12 MET: 86 48 86 F7 0D 01 07 01 30 1F 06 09 2A 86 48 86 F7
0D 01 09
Oct 20 09:00:12 MET: 04 31 12 04 10 DA AB FE 45 26 AD 13 49 CC 16 73 E4
A5 1A 0B
Oct 20 09:00:12 MET: 0D 30 20 06 0A 60 86 48 01 86 F8 45 01 09 05 31 12
04 10 BC
Oct 20 09:00:12 MET: 0D E5 F3 9A A1 95 55 E5 28 CF DA 01 99 58 C7 30 0D
06 09 2A
Oct 20 09:00:12 MET: 86 48 86 F7 0D 01 01 01 05 00 04 81 80 14 F2 43 20
36 86 C8
Oct 20 09:00:12 MET: F2 AB 95 E9 2F 45 6E FB 47 BE 83 37 B2 9A BA AC EC
14 7B F6
Oct 20 09:00:12 MET: C4 45 68 45 5D 9C 45 B0 B0 94 64 C9 CC 2F 7F F9 95
A7 91 32
Oct 20 09:00:12 MET: E5 24 62 FE 64 08 CA 70 A0 93 05 FD 13 66 07 FC 7C
CF E7 E3
Oct 20 09:00:12 MET: 91 BB CB 41 B7 E1 57 82 D5 48 3B 9D A6 E6 BA 89 9D
15 ED 71
Oct 20 09:00:12 MET: 35 83 F7 7A 0D C9 AA 4C 2C 43 3F 5D 40 9D A8 F8 19
56 D3 0A
Oct 20 09:00:12 MET: 64 CC 27 51 F6 3E C6 4A 3C 54 61 96 1F FC D4 58 90
46 3D 34
Oct 20 09:00:12 MET: 7E 00 00 00 00 00 00 00 00
Oct 20 09:00:12 MET: CRYPTO_PKI: status = 0: failed to create GetCRL
Oct 20 09:00:12 MET: CRYPTO_PKI: transaction GetCRL completed
home-vpn(config)#
----------------------------------------- snap -------------------------
What's wrong? Any ideas? Why the creation failed? Maybe not enough
memory (I have 8MB Flash and 32 MB RAM in my Cisco 2600 like recommended
for this ios release).

yours sincerely

M. Hofmann

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Markus Hofmann          Phone:    +49 170 2848250
St. Urbanusstr. 15      Fax:      +49 9371 2032
                        E-Mail:   hofmann at hofmar.de
63927 Buergstadt        SMS-Mail: sms at hofmar.de (Only Subject)
Germany                 PGP-Keys: look at http://www.hofmar.de
---------------------------------------------------------------------
         Only written with 100% recycleable electrons!

****************************************************************
TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com

The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html

We are currently experiencing "unsubscribe" difficulties.  If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn at listserv.secnetgroup.com

****************************************************************




More information about the VPN mailing list