dalini wrote:
so i guess - this is just a small problem somewhere but a bit tricky to locate... since i have this running with pix 'without' problems - in early stages of scep-getting-ready-to-really-work i had some nightmares with this stuff... because some hints at cisco docu are easy to overread but importend to follow to get things work properly...yeah - we traced it down - and its kind of tricky but simple to solve ;o) - so short for all
if you get a (scep) request from cisco hardware (this is for pix but other cisco equipment should be similar) - please EDIT it the following way:
set subject alt name to: IP : ipaddress DNS: FQDN
!!!IMPORTEND!!!
change the subject if you have the bottom line with cn: fqdn + unstructured... + unstructered... or similar
clean up all + fields! otherwise you end up like j�rg with strange behavior and non issued certs and so on
setup the subject as follows:
first fild(top) and only fill the left sided files - no + filds at the bottom! since this seemes to be buggy and doesn't work right at the moment
unstructuredAddress: IP unstructuredName: FQDN cn: FQDN ou, o, c or dc as needed by your organisation
this should work
i hope i did post something understandable *g* - kind of late so have a nice day - hehe
greetings dalini
-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
