Extended Validation Certificate in Cisco SSL module

[lukaszkhalil]

Hello

Does anybody install the VeriSign Extended Validation certificate in the Cisco SSLM module?

I had some issues with it. Below I am attaching the VeriSign's knowledgebase regarding such installation on Apache server

https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&id=SO10890

I could not delete the rootCA cert, because of the chain incomplete issue.

Thank you in advance for any help.

Regards

Lukas

[chrhiggi]

Hello Lukas-

EV certs are supported on the SSLM for SSL decryption and initiation.  The client browser handles the extended functions of the EV certificates - The SSL server does not do anything it would not for a normal certificate, so the SSLM is unaware/transparent to the change.  You will want to check out bug ID CSCsl42088, depending on how you choose to deploy the trustpoint, you may need to have a minimum code to meet the fix for it.

For anyone who is interested, here is a good bit of information about what EV certs are:

http://en.wikipedia.org/wiki/Extended_Validation

Regards,

Chris