Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

certificate expired issue

Hi,

Can someone tell me how to fix this issue? I think it is CA server issue. I configured a 2800 router as a CA server.

Thanks

Jul 10 18:40:46.834: %CRYPTO-5-IKMP_INVAL_CERT: Certificate received from 103.13.13.86 is bad: CA request failed!

Jul 10 18:40:48.398: %CRYPTO-3-IKMP_QUERY_KEY: Querying key pair failed.

Jul 10 18:40:49.890: %PKI-3-CERTIFICATE_INVALID_EXPIRED: Certificate chain validation has failed.  The certificate (SN: 0099) has expired.    Validity period ended on 18:10:45 UTC Jul 7 2013

Jul 10 18:40:49.890: %CRYPTO-5-IKMP_INVAL_CERT: Certificate received from 62.251.172.105 is bad: CA request failed!

Jul 10 18:40:49.962: %CRYPTO-3-IKMP_QUERY_KEY: Querying key pair failed.

Jul 10 18:40:51.446: %CRYPTO-3-IKMP_QUERY_KEY: Querying key pair failed.

  • VPN
2 REPLIES
Hall of Fame Super Silver

certificate expired issue

Yes. You need to generate and install a new certificate (assuming it's self-signed). See, for instance, the configuration example here.

New Member

certificate expired issue

Thanks Marvin.

I will check that document.

245
Views
0
Helpful
2
Replies