cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1253
Views
0
Helpful
1
Replies

Certificate error- Cisco IOS router as CA

Ajay Raj
Level 1
Level 1

Hi,

 

I am trying a very simple CA set up as below

 

R4 Fa3/0--------------Fa0/0 R2 AKA CA SERVER

 

Below is the debug o/p from R2 while executing the command "crypto CA authenticate <trustpoint-name>" in R4

May 18 11:23:14.383: CRYPTO_CS: received a SCEP GetCACert request
May 18 11:23:14.391: CRYPTO_CS: msg not sent due to HTTP server error 1725988684
May 18 11:23:14.391: CRYPTO_CS: CA certificate not sent due to HTTP server error.
May 18 11:23:14.487: CRYPTO_CS: received a SCEP GetCACaps request
May 18 11:23:14.491: CRYPTO_CS: msg not sent due to HTTP server error 1
May 18 11:23:14.495: CRYPTO_CS: Capabilities not sent due to HTTP server error

R2#

 

R2 Config =

crypto pki server CA-KEY
issuer-name CN=CCIE training O=Ajuslab OU=training L=India
grant auto
crypto pki trustpoint CA-KEY
revocation-check crl
rsakeypair CA-KEY
crypto pki certificate chain CA-KEY
certificate ca 01
30820245 308201AE A0030201 02020101 300D0609 2A864886 F70D0101 04050030
36313430 32060355 0403132B 43434945 20747261 696E696E 67204F3D 416A7573

 

R4

crypto pki trustpoint TP-self-signed-4279256517
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-4279256517
revocation-check none
rsakeypair TP-self-signed-4279256517
crypto pki trustpoint CLIENT-KEY
enrollment url http://199.55.55.1:80
revocation-check none
crypto pki certificate chain TP-self-signed-4279256517
crypto pki certificate chain CLIENT-KEY
certificate ca 01
30820245 308201AE A0030201 02020101 300D0609 2A864886 F70D0101 04050030
36313430 32060355 0403132B 43434945 20747261 696E696E 67204F3D 416A7573

 

Can anyone help me whats this error is & how to fix it?

1 Reply 1

Hi,
Is http disabled on the router? ...it is disabled as default - Enable it by entering the command "ip http server"

HTH
Review Cisco Networking for a $25 gift card