Integration of CA with VPN 3000

rahatsiddiq · ‎06-28-2007

when i install Certitificate Authority e in Cisco VPN 3000 Concentrator 4.0.1 its showing that this certificate is not valid

e.g.

Serial Number 5F1D3073E9F084A94D76C4ADB88AC2B3

Signing Algorithm SHA1WithRSA

Public Key Type RSA (512 bits)

Certificate Usage Non Repudiation,Certificate Signature,CRL Signature

MD5 Thumbprint F4:BA:07:05:69:0C:B6:CA:98:8A:E9:ED:B3:2C:42:2A

SHA1 Thumbprint DF:34:A9:A8:06:FE:A6:61:42:30:65:AA:70:04:8C:8E:9D:FC:A3:6C

Validity 6/25/2007 at 13:22:06 to 6/25/2009 at 13:30:35

Ceritificate not valid yet.

CRL Distribution Point ldap:///CN=testca,CN=testca,CN=CDP,CN=Public Key Services,CN=Services,CN=Configuration,DC=accessgroup,DC=com,DC=pk/objectclass=cRLDistributionPoint hxxp://testca.accessgroup.com.pk/CertEnroll/testca.crl

when i connect users from Routing & Remote Access Server VPN of windows 2000 Ceritificate Authority and its connected smoothely.

but now when i integrate vpn 3000 with CA... its showing that this ceritificate is not valid...

ssoberlik · ‎07-04-2007

This issue is due to the ending time period, after which the certificate is not considered valid.

To display the certificate summary and detailed reports, use the show crypto certificate command in Exec mode.

The syntax of this command is:

show crypto certificate {filename | all}