Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

SCEP

Hi all. I am deploy a SCEP Responder in Java.

GetCACert operation is working and CA and RA certificates is stored in Router Cisco 4500 with IOS c4500-is56i-mz.121-6.bin.

I'm trying enrollment operation but when I run:

"crypto ca enroll MyPKI" (CA Fingerprint is correct and stored) I get this message:

************************************************

5d13h: CRYPTO_PKI: status = 287: failed to sign the data

5d13h: CRYPTO_PKI: status = 65535: PKCS7 wrapping failed.

5d13h: CRYPTO_PKI: status = 0: failed to create pkcsreq message

5d13h: CRYPTO_PKI: status = 65535: fail to send out pkcsreq

***********************

and request is not send to the CA.

the CA/RA Certificates are:

****************************************

CA Certificate

Status: Available

Certificate Serial Number: 01

Key Usage: Signature

Issuer:

CN = CIRCuS CA

O = ANTS

C = ES

Subject Name:

CN = CIRCuS CA

O = ANTS

C = ES

Validity Date:

start date: 16:00:23 UTC Nov 26 2000

end date: 16:00:23 UTC Nov 26 2001

RA General purpose Certificate

Status: Available

Certificate Serial Number: 0286

Key Usage: General Purpose

Issuer:

CN = CIRCuS CA

O = ANTS

C = ES

Subject Name:

CN = cert.piscis.ono.es

OU = piloto-ONO

O = ANTS

ST = Some-State

C = ES

Validity Date:

start date: 11:16:48 UTC Jun 6 2001

end date: 12:16:48 UTC Dec 6 2001

***********************************************

I think RA certificate is not correct, but I don't know why ¡¡

need some special extensions?

thanks in advance, Gabi.

4 REPLIES
Silver

Re: SCEP

12.1.6 is a Major release but this still sure sounds like a bug to me. Have you talked to Cisco's engineers yet?

New Member

Re: SCEP

Sorry, I don't know how.

thanks to response, Gabi.

Silver

Re: SCEP

You either need to be under warranty or have a support contract with Cisco. You can find out how to get one of their engineers to help by visiting this link http://www.cisco.com/public/support/tac/contact.shtml

New Member

Re: SCEP

ok, thanks, but I dont have a support contract withc Cisco :-(

363
Views
0
Helpful
4
Replies
CreatePlease to create content