Any update on this?   I had the same problem with Juniper SRX, but Juniper has this option:   set system internet-options no-ipv6-reject-zero-hop-limit   Which after setting, resolved my IPv6 problems with Spectrum. Maybe a similar setting in the ASA...

I'm using OpenSSL for this. In OpenSSL, I have a config file:   /root/ca/intermediate/openssl.cnf   This file has the following extension block, in which I find basicConstraints: [ server_cert ]# Extensions for server certificates (`man x509v3_config...

I'm using OpenSSL for this. In OpenSSL, I have a config file:   /root/ca/intermediate/openssl.cnf   This file has the following extension block, in which I find basicConstraints: [ server_cert ]# Extensions for server certificates (`man x509v3_config...

Cisco bug CSCvg28901 matches this: Symptom:Certificate with Basic Constraints extension not critical will not be imported on FMC or sensor with error:Unable to install certificate   I modified the extensions in my "server_cert" block, and changed to ...