[prev in list] [next in list] [prev in thread] [next in thread] 

List:       vpn
Subject:    Problem with loading a CA's CRL in Cisco IOS
From:       Markus Hofmann <markus () hofmar ! de>
Date:       1999-10-20 7:37:34
[Download RAW message or body]

Hello!

I have a Netscape Certificate Server (4.1 Solaris) and a Cisco 2600
(with IOS IP Plus IPSEC, 12.0.6 LD).
At the time I have to use the "crl optional" command in my crypto ca to
establish a ipsec connection, because the requesting the CRL do not
work. Here's there error I've got, when requesting the CRL:
(Attention - very long ;-))
------------------------ snip --------------------------------
home-vpn(config)#crypto ca crl request myCA
home-vpn(config)#
Oct 20 09:00:11 MET: Write out getcrl content:119
Oct 20 09:00:11 MET: 30 75 30 70 31 0B 30 09 06 03 55 04 06 13 02 44 45
31 0F 30
Oct 20 09:00:11 MET: 0D 06 03 55 04 08 13 06 48 65 73 73 65 6E 31 11 30
0F 06 03
Oct 20 09:00:11 MET: 55 04 07 13 08 4B 72 6F 6E 62 65 72 67 31 0E 30 0C
06 03 55
Oct 20 09:00:11 MET: 04 0A 13 05 42 72 61 75 6E 31 0F 30 0D 06 03 55 04
0B 13 06
Oct 20 09:00:11 MET: 46 49 54 53 2D 33 31 1C 30 1A 06 03 55 04 03 13 13
42 52 41
Oct 20 09:00:11 MET: 55 4E 20 46 49 54 53 2D 33 20 56 50 4E 20 43 41 02
01 01
Oct 20 09:00:11 MET: Enveloped Data ...

Oct 20 09:00:11 MET: 30 80 06 09 2A 86 48 86 F7 0D 01 07 03 A0 80 30 80
02 01 00
Oct 20 09:00:11 MET: 31 80 30 82 01 0C 02 01 00 30 75 30 70 31 0B 30 09
06 03 55
Oct 20 09:00:11 MET: 04 06 13 02 44 45 31 0F 30 0D 06 03 55 04 08 13 06
48 65 73
Oct 20 09:00:11 MET: 73 65 6E 31 11 30 0F 06 03 55 04 07 13 08 4B 72 6F
6E 62 65
Oct 20 09:00:11 MET: 72 67 31 0E 30 0C 06 03 55 04 0A 13 05 42 72 61 75
6E 31 0F
Oct 20 09:00:11 MET: 30 0D 06 03 55 04 0B 13 06 46 49 54 53 2D 33 31 1C
30 1A 06
Oct 20 09:00:11 MET: 03 55 04 03 13 13 42 52 41 55 4E 20 46 49 54 53 2D
33 20 56
Oct 20 09:00:11 MET: 50 4E 20 43 41 02 01 01 30 0D 06 09 2A 86 48 86 F7
0D 01 01
Oct 20 09:00:11 MET: 01 05 00 04 81 80 38 8E E6 CD 3E 4F 6C 46 7E 3C 17
7B BA 9B
Oct 20 09:00:11 MET: 6F 44 89 67 1A C9 6C 5B B5 D9 37 6B 09 38 AD 88 71
35 84 FF
Oct 20 09:00:11 MET: 1B 20 AF B2 C3 E3 31 78 A2 9D 8A 43 53 1D 95 7C BA
5C DD 95
Oct 20 09:00:11 MET: 60 59 18 DA B4 BE F6 7C 95 7B 34 B1 A9 8A 99 04 82
75 8F 92
Oct 20 09:00:11 MET: 0A 45 EE B1 43 25 74 0B 9A E7 26 9A 99 47 5E A8 F0
C4 1E 4F
Oct 20 09:00:11 MET: ED 27 8E 47 F6 5A 5D 67 03 72 4F 60 AE 7C E5 88 40
A9 96 E7
Oct 20 09:00:11 MET: 1A AE 54 67 2F 98 29 C0 6E 3A 27 25 8C 78 00 00 30
80 06 09
Oct 20 09:00:11 MET: 2A 86 48 86 F7 0D 01 07 01 30 11 06 05 2B 0E 03 02
07 04 08
Oct 20 09:00:11 MET: CD A4 3A 15 13 BF D2 55 A0 80 04 70 B5 84 99 FF 4D
1E 71 16
Oct 20 09:00:11 MET: E0 6C 90 F5 68 54 16 B2 D7 4C 37 0A C0 23 37 A4 8F
CE 5A 98
Oct 20 09:00:11 MET: BE EF BC 41 87 D7 BA 05 0E DF 76 C4 FC B6 14 57 BD
42 A2 B2
Oct 20 09:00:11 MET: C4 82 4F E6 43 2E 99 F7 44 C1 2E F6 E6 23 C2 A0 25
44 74 62
Oct 20 09:00:11 MET: 6F F7 B3 58 47 E1 C8 04 FA 7C 6D 0F 54 DB B1 23 55
E9 E8 90
Oct 20 09:00:11 MET: 51 10 96 79 F5 E8 F8 0C C8 AB 11 2E DB 9F 99 2C 2D
76 80 D7
Oct 20 09:00:11 MET: 14 CB 7B BA 04 08 D1 BE 84 FB A5 0E 57 3A 00 00 00
00 00 00
Oct 20 09:00:11 MET: 00 00 00 00
Oct 20 09:00:12 MET: Signed Data 1609 bytes
Oct 20 09:00:12 MET: 30 80 06 09 2A 86 48 86 F7 0D 01 07 02 A0 80 30 80
02 01 01
Oct 20 09:00:12 MET: 31 0E 30 0C 06 08 2A 86 48 86 F7 0D 02 05 05 00 30
80 06 09
Oct 20 09:00:12 MET: 2A 86 48 86 F7 0D 01 07 01 A0 80 24 80 04 82 01 D0
30 80 06
Oct 20 09:00:12 MET: 09 2A 86 48 86 F7 0D 01 07 03 A0 80 30 80 02 01 00
31 80 30
Oct 20 09:00:12 MET: 82 01 0C 02 01 00 30 75 30 70 31 0B 30 09 06 03 55
04 06 13
Oct 20 09:00:12 MET: 02 44 45 31 0F 30 0D 06 03 55 04 08 13 06 48 65 73
73 65 6E
Oct 20 09:00:12 MET: 31 11 30 0F 06 03 55 04 07 13 08 4B 72 6F 6E 62 65
72 67 31
Oct 20 09:00:12 MET: 0E 30 0C 06 03 55 04 0A 13 05 42 72 61 75 6E 31 0F
30 0D 06
Oct 20 09:00:12 MET: 03 55 04 0B 13 06 46 49 54 53 2D 33 31 1C 30 1A 06
03 55 04
Oct 20 09:00:12 MET: 03 13 13 42 52 41 55 4E 20 46 49 54 53 2D 33 20 56
50 4E 20
Oct 20 09:00:12 MET: 43 41 02 01 01 30 0D 06 09 2A 86 48 86 F7 0D 01 01
01 05 00
Oct 20 09:00:12 MET: 04 81 80 38 8E E6 CD 3E 4F 6C 46 7E 3C 17 7B BA 9B
6F 44 89
Oct 20 09:00:12 MET: 67 1A C9 6C 5B B5 D9 37 6B 09 38 AD 88 71 35 84 FF
1B 20 AF
Oct 20 09:00:12 MET: B2 C3 E3 31 78 A2 9D 8A 43 53 1D 95 7C BA 5C DD 95
60 59 18
Oct 20 09:00:12 MET: DA B4 BE F6 7C 95 7B 34 B1 A9 8A 99 04 82 75 8F 92
0A 45 EE
Oct 20 09:00:12 MET: B1 43 25 74 0B 9A E7 26 9A 99 47 5E A8 F0 C4 1E 4F
ED 27 8E
Oct 20 09:00:12 MET: 47 F6 5A 5D 67 03 72 4F 60 AE 7C E5 88 40 A9 96 E7
1A AE 54
Oct 20 09:00:12 MET: 67 2F 98 29 C0 6E 3A 27 25 8C 78 00 00 30 80 06 09
2A 86 48
Oct 20 09:00:12 MET: 86 F7 0D 01 07 01 30 11 06 05 2B 0E 03 02 07 04 08
CD A4 3A
Oct 20 09:00:12 MET: 15 13 BF D2 55 A0 80 04 70 B5 84 99 FF 4D 1E 71 16
E0 6C 90
Oct 20 09:00:12 MET: F5 68 54 16 B2 D7 4C 37 0A C0 23 37 A4 8F CE 5A 98
BE EF BC
Oct 20 09:00:12 MET: 41 87 D7 BA 05 0E DF 76 C4 FC B6 14 57 BD 42 A2 B2
C4 82 4F
Oct 20 09:00:12 MET: E6 43 2E 99 F7 44 C1 2E F6 E6 23 C2 A0 25 44 74 62
6F F7 B3
Oct 20 09:00:12 MET: 58 47 E1 C8 04 FA 7C 6D 0F 54 DB B1 23 55 E9 E8 90
51 10 96
Oct 20 09:00:12 MET: 79 F5 E8 F8 0C C8 AB 11 2E DB 9F 99 2C 2D 76 80 D7
14 CB 7B
Oct 20 09:00:12 MET: BA 04 08 D1 BE 84 FB A5 0E 57 3A 00 00 00 00 00 00
00 00 00
Oct 20 09:00:12 MET: 00 00 00 00 00 00 00 A0 80 30 82 02 83 30 82 01 EC
A0 03 02
Oct 20 09:00:12 MET: 01 02 02 01 06 30 0D 06 09 2A 86 48 86 F7 0D 01 01
04 05 00
Oct 20 09:00:12 MET: 30 70 31 0B 30 09 06 03 55 04 06 13 02 44 45 31 0F
30 0D 06
Oct 20 09:00:12 MET: 03 55 04 08 13 06 48 65 73 73 65 6E 31 11 30 0F 06
03 55 04
Oct 20 09:00:12 MET: 07 13 08 4B 72 6F 6E 62 65 72 67 31 0E 30 0C 06 03
55 04 0A
Oct 20 09:00:12 MET: 13 05 42 72 61 75 6E 31 0F 30 0D 06 03 55 04 0B 13
06 46 49
Oct 20 09:00:12 MET: 54 53 2D 33 31 1C 30 1A 06 03 55 04 03 13 13 42 52
41 55 4E
Oct 20 09:00:12 MET: 20 46 49 54 53 2D 33 20 56 50 4E 20 43 41 30 1E 17
0D 39 39
Oct 20 09:00:12 MET: 31 30 31 39 31 36 30 33 32 39 5A 17 0D 30 30 31 30
31 38 31
Oct 20 09:00:12 MET: 36 30 33 32 39 5A 30 43 31 41 30 19 06 09 2A 86 48
86 F7 0D
Oct 20 09:00:12 MET: 01 09 08 13 0C 31 39 33 2E 31 37 2E 31 32 36 2E 31
30 24 06
Oct 20 09:00:12 MET: 09 2A 86 48 86 F7 0D 01 09 02 16 17 68 6F 6D 65 2D
76 70 6E
Oct 20 09:00:12 MET: 2E 76 70 6E 2E 62 72 61 75 6E 61 67 2E 64 65 30 81
9F 30 0D
Oct 20 09:00:12 MET: 06 09 2A 86 48 86 F7 0D 01 01 01 05 00 03 81 8D 00
30 81 89
Oct 20 09:00:12 MET: 02 81 81 00 B0 6B 12 5E ED 96 A3 E6 7E 61 8E EC 32
46 7E 3C
Oct 20 09:00:12 MET: C9 99 2B 47 83 60 6E 40 4F C7 D1 AA B2 0B 6C C7 CE
15 84 EA
Oct 20 09:00:12 MET: DF A4 36 78 84 8D 9A CA CE 4D DE 9A 33 73 6C BF 0B
3B EE 19
Oct 20 09:00:12 MET: 3F AF D1 38 04 5B 9F E8 5F 33 C8 93 13 FD CA 91 E7
07 C2 75
Oct 20 09:00:12 MET: 6D E5 24 D4 42 37 CE 58 EC 86 E4 9A 13 08 28 4A 0C
F7 C2 24
Oct 20 09:00:12 MET: 7A 06 F7 F3 39 F9 89 E8 B3 69 B3 F1 73 83 28 E0 EC
88 AA 23
Oct 20 09:00:12 MET: 87 77 BC 0E E1 FB 06 BD 98 03 E0 27 02 03 01 00 01
A3 5A 30
Oct 20 09:00:12 MET: 58 30 0B 06 03 55 1D 0F 04 04 03 02 07 80 30 28 06
03 55 1D
Oct 20 09:00:12 MET: 11 04 21 30 1F 82 17 68 6F 6D 65 2D 76 70 6E 2E 76
70 6E 2E
Oct 20 09:00:12 MET: 62 72 61 75 6E 61 67 2E 64 65 87 04 C1 11 7E 01 30
1F 06 03
Oct 20 09:00:12 MET: 55 1D 23 04 18 30 16 80 14 F9 CD DD 87 3E 0C B2 10
23 94 9F
Oct 20 09:00:12 MET: BE 05 65 11 FF D6 53 BC 28 30 0D 06 09 2A 86 48 86
F7 0D 01
Oct 20 09:00:12 MET: 01 04 05 00 03 81 81 00 A6 F1 36 60 57 7F BE 90 C0
2A 96 39
Oct 20 09:00:12 MET: 25 A9 CC 85 F1 7A A3 CC 54 C8 68 F9 8B C1 CE 75 16
84 2A 29
Oct 20 09:00:12 MET: 99 21 20 95 6A E3 3B 7E 4A 5B 36 5B 4F 17 5F E4 68
3C 4F 3A
Oct 20 09:00:12 MET: 9C 51 48 8F 5F C6 8A D1 02 F4 DD 48 BF 09 52 76 E3
C9 86 2F
Oct 20 09:00:12 MET: 91 58 7C 32 96 0F 99 F5 E4 6F 43 24 82 E0 E6 A1 2A
50 66 03
Oct 20 09:00:12 MET: 22 BD 38 1A 04 71 9D 98 3B 67 72 5C 72 72 16 17 FE
2F 9F CB
Oct 20 09:00:12 MET: 46 1A F1 5D FA 2C 3C 4F E9 09 04 E3 5B 10 25 42 00
00 31 80
Oct 20 09:00:12 MET: 30 82 01 A1 02 01 01 30 75 30 70 31 0B 30 09 06 03
55 04 06
Oct 20 09:00:12 MET: 13 02 44 45 31 0F 30 0D 06 03 55 04 08 13 06 48 65
73 73 65
Oct 20 09:00:12 MET: 6E 31 11 30 0F 06 03 55 04 07 13 08 4B 72 6F 6E 62
65 72 67
Oct 20 09:00:12 MET: 31 0E 30 0C 06 03 55 04 0A 13 05 42 72 61 75 6E 31
0F 30 0D
Oct 20 09:00:12 MET: 06 03 55 04 0B 13 06 46 49 54 53 2D 33 31 1C 30 1A
06 03 55
Oct 20 09:00:12 MET: 04 03 13 13 42 52 41 55 4E 20 46 49 54 53 2D 33 20
56 50 4E
Oct 20 09:00:12 MET: 20 43 41 02 01 06 30 0C 06 08 2A 86 48 86 F7 0D 02
05 05 00
Oct 20 09:00:12 MET: A0 81 84 30 11 06 0A 60 86 48 01 86 F8 45 01 09 07
31 03 13
Oct 20 09:00:12 MET: 01 34 30 12 06 0A 60 86 48 01 86 F8 45 01 09 02 31
04 13 02
Oct 20 09:00:12 MET: 32 32 30 18 06 09 2A 86 48 86 F7 0D 01 09 03 31 0B
06 09 2A
Oct 20 09:00:12 MET: 86 48 86 F7 0D 01 07 01 30 1F 06 09 2A 86 48 86 F7
0D 01 09
Oct 20 09:00:12 MET: 04 31 12 04 10 DA AB FE 45 26 AD 13 49 CC 16 73 E4
A5 1A 0B
Oct 20 09:00:12 MET: 0D 30 20 06 0A 60 86 48 01 86 F8 45 01 09 05 31 12
04 10 BC
Oct 20 09:00:12 MET: 0D E5 F3 9A A1 95 55 E5 28 CF DA 01 99 58 C7 30 0D
06 09 2A
Oct 20 09:00:12 MET: 86 48 86 F7 0D 01 01 01 05 00 04 81 80 14 F2 43 20
36 86 C8
Oct 20 09:00:12 MET: F2 AB 95 E9 2F 45 6E FB 47 BE 83 37 B2 9A BA AC EC
14 7B F6
Oct 20 09:00:12 MET: C4 45 68 45 5D 9C 45 B0 B0 94 64 C9 CC 2F 7F F9 95
A7 91 32
Oct 20 09:00:12 MET: E5 24 62 FE 64 08 CA 70 A0 93 05 FD 13 66 07 FC 7C
CF E7 E3
Oct 20 09:00:12 MET: 91 BB CB 41 B7 E1 57 82 D5 48 3B 9D A6 E6 BA 89 9D
15 ED 71
Oct 20 09:00:12 MET: 35 83 F7 7A 0D C9 AA 4C 2C 43 3F 5D 40 9D A8 F8 19
56 D3 0A
Oct 20 09:00:12 MET: 64 CC 27 51 F6 3E C6 4A 3C 54 61 96 1F FC D4 58 90
46 3D 34
Oct 20 09:00:12 MET: 7E 00 00 00 00 00 00 00 00
Oct 20 09:00:12 MET: CRYPTO_PKI: status = 0: failed to create GetCRL
Oct 20 09:00:12 MET: CRYPTO_PKI: transaction GetCRL completed
home-vpn(config)#
----------------------------------------- snap -------------------------
What's wrong? Any ideas? Why the creation failed? Maybe not enough
memory (I have 8MB Flash and 32 MB RAM in my Cisco 2600 like recommended
for this ios release).

yours sincerely

M. Hofmann

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Markus Hofmann          Phone:    +49 170 2848250
St. Urbanusstr. 15      Fax:      +49 9371 2032
                        E-Mail:   hofmann@hofmar.de
63927 Buergstadt        SMS-Mail: sms@hofmar.de (Only Subject)
Germany                 PGP-Keys: look at http://www.hofmar.de
---------------------------------------------------------------------
         Only written with 100% recycleable electrons!

****************************************************************
TO POST A MESSAGE on this list, send it to vpn@listserv.secnetgroup.com

The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html

We are currently experiencing "unsubscribe" difficulties.  If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn@listserv.secnetgroup.com

****************************************************************

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic