Router to Router ipsec using Verisign CA - Not accepting CRL's.

[raju_raghavan]

hi,

This is regarding establishing IPSEC tunnels using CA certificates.

The IPSEC tunnel is getting established after enrollment and installation of certificates.But even after revoking the certificates and generation of CRL the IPSEC tunnel still continues to establish.I have even tried removing crl optional command from the ca trustpoint configuration.

I am using the verisign CA server for certificate generation.

I would also like to know if router can accept CRL's through HTTP as the normal CLI accepts only crl's through LDAP.

Thanks and Regards

Raju Raghavan

[umedryk]

Router cannot accept CRLs through the http as is the case with normal cli.

[raju_raghavan]

hi ,

Thanks a lot for the information.It would be great if you could let me have a URL which explains CRL revocation with VERISIGN CA's configuration.

Thanks

Raju