EV SSL Certificates w/Cisco CSS

yycsandman007 · ‎03-15-2007

Does anyone have any experience installing EV SSL Certificates on a Cisco CSS? From what I understand these are a fairly new type of cert. After speaking with VeriSign, they told me that they haven't tested it yet, but it should work. That makes me VERY nervous...just like saying windows updates and patches should not have any impact on your system. Aparently for these new certificates, it requires the installation of a second intermediate certificate on the CSS.

Any advice or suggestions would be greatly appreciated.

Thanks in advance.

Syed Iftekhar Ahmed · ‎03-15-2007

Intermediate certificates are supported on CSS. You just need to concatenate "server cert" and "intermediate cert" before importing to CSS and associating it with SSL Proxy.

Syed Iftekhar Ahmed

yycsandman007 · ‎03-15-2007

Have you tested or tried this before? Were you successfully able to do it?

Thanks!

Syed Iftekhar Ahmed · ‎03-15-2007

No I havent tested these ones by my self. I have used other chained certs successfully on CSS.

As per my understanding these certs are x.509 extensions and support for these should be available in browsers not SSL servers.SSl server simply send these certficates to browsers and SSL on CSS also acts like a SSL Server.For backend SSL you need to test it out on CSS

In summary..

I think You are safe if you are only using CSS

for front end SSL (where CSS acts as ssl server).If you are using Backend SSL then CSS will act as both SSL Server & Client and you may face issues.

Syed Iftekhar Ahmed