VPN 3015 + cisco vpn client AND OpenSSL / CSP Digital Certificate usage

[jamess]

I am involved in some testing for using CA and identity certs on the 3015 Concentrator (3.6.1) and the Cisco VPN Client (3.6) that have been generated / signed by CSP, which is a front end for OpenSSL.

We are having some difficulties, and are hoping to gain some insight into anyone elses experiences with using CSP/OpenSSL for their CA. With the Microsoft CA we've had success, but we would prefer to go via OpenSSL.

My question is, has anyone had any experience with using CSP or any other front-end for OpenSSL as a CA for their VPN Concentrator, or any other Cisco device for that matter?

[awaheed]

Hi James,

Not to say it may not work if standards are followed, but we don’t do any internal testing with OpenSSL CA. You may want to make sure you’re using v3.6.5 on the Concentrator and then try it. In case you are not having too much luck a TAC engineer maybe able to work with you to file a bug or hopefully get it working with the latest code.

Hope this helps,

Regards,

Aamir

-=-=-