ASA Certificate errors

leach_stuart — Mon, 11 Mar 2019 21:32:36 GMT

I have imported a trusted wildcard certificate to a Cisco ASA 5510, that included the root and internediated CA Certs.

Everything seems to have gone well but when I run a Nessus Vulnerability scan I receive the following.

|--- *** ERROR:

|--- *** The issuing certificate is missing the key usage extension,

|--- *** which is required for all certificates that sign others.

I have checked the certificates and all appears to be OK.

The same Certificates have been deployed to some Servers and are fine when scanned.

I have spoken to the CA, they pointed me to other root certificates which I have applied, but I still receive the same error.

Any suggestions would be greatly appreciated.

Marcin Latosiewicz — Sat, 01 Oct 2011 08:36:35 GMT

Hi,

Do you mind sharing the the certs and your trustpoint settings (show run crypto ca trust)?

Mind that I do not need RSA keys, just the DER or base64 of identity and subsequent certs.

Marcin

topic ASA Certificate errors in Network Security