09-19-2016 02:22 AM
Hello,
I had some issue with the Cisco network assistant to connect via https to Catalyst switches running IOS version 15.0(2).
This is due to the fact that Cisco CNA still use SSLv3 to connect securely to the devices but SSLv3 has been disable from IOS switches.
Cisco TAC told us that this will be fix if CNA 6.3 but unfortunately this is not the case, I'm still getting a SSL error:
*Jan 2 00:18:57.369: CRYPTO_OPSSL: SSL3.0 is no longer supported.Enabling TLSv1
Does anyone know if we can do something to use https to connect to our switches via the CNA ?
Or anyone from Cisco can let us know when TLS will be activate on the CNA ?
Have a good day.
02-06-2017 01:12 PM
Hello,
I just want to add that I have this exact same issue. I am unable to use HTTP to manage the switches as the information is passed in clear text.
I do not configure the switches via CNA, but appreciate the graphical view of the topology and switch health that it provides.
Because using a Cisco-recommended image disabled SSLv3, I believe it is the responsibility of Cisco to update their tools to also disable SSLv3 while enabling modern TLS support.
04-13-2017 03:50 PM
Same... Still 7+ months later...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide