Install 3rd Party Vendor Certificates for use with WebVPN - ERROR

[john.ebrahim83]

I have windows 2008 R2 as CA Standalone Root. when i am generating the certificate request from cisco ASA and importing it in CA SERVER i am getting this error. please tell me i am using asa image 8.0.2 doing it in GNS3 and i have to implement it. however in windows 2003 servers the same request is importable.

ERROR:  asn1 bad tag value met asn 267

[fb_webuser]

I think it would be worthwhile to delte the keypair used to create the CSR. Create a new keypair and use a keysize of 1024 and recreate the csr.

---

Posted by WebUser Paul Carco from Cisco Support Community App

[john.ebrahim83]

hey guys the above issue was resolved. now i have following error.

1- anyconnect popup with WARNING MESSAGE: Warning: "The following Certificate received from the Server could not be verified: "

2- on asa i can see following debug messages.

CRYPTO_PKI: Sorted chain size is: 1

CRYPTO_PKI: Found ID cert. serial number: 02, subject name: cn=admin

CRYPTO_PKI: Verifying certificate with serial number: 02, subject name: cn=admin, issuer_name: cn=ciscoasa, signature alg: SHA1/RSA.

CRYPTO_PKI(Cert Lookup) issuer="cn=ciscoasa" serial number=02                                                 |  .

CRYPTO_PKI: Invalid cert.

----------------------------------------------------------

do let me know why is this happening. i have installed both CA and Indetity certificates on cisco asa 8.4.

my client OS is Win7.