[c-nsp] ASA wild card cert...

Scott Granados scott at granados-llc.net
Thu Jul 5 13:27:25 EDT 2012


I Second that, Ryan has helped me get unwedged on many ASA issues.  (including one similar to yours)  Much appreciated!

On Jul 5, 2012, at 1:19 PM, Scott Voll wrote:

> Thanks..... Perfect command.  I was able to find the wrong Cert and fix it.
> 
> you rock Ryan.
> 
> Scott
> 
> On Thu, Jul 5, 2012 at 8:55 AM, Ryan West <rwest at zyedge.com> wrote:
> 
>> Did you get the entire chain as part of your export, sounds like you're
>> missing an intermediate cert?  Do you see a difference between the ASA's
>> when issue 'show crypto ca certificate'?
>> 
>> -ryan
>> 
>> -----Original Message-----
>> From: cisco-nsp-bounces at puck.nether.net [mailto:
>> cisco-nsp-bounces at puck.nether.net] On Behalf Of Scott Voll
>> Sent: Thursday, July 05, 2012 11:38 AM
>> To: cisco-nsp at puck.nether.net
>> Subject: [c-nsp] ASA wild card cert...
>> 
>> I have exported from one ASA and would like to move to a second ASA our
>> Wild card cert.  It looks like the export / import went well.  I can even
>> see in IE that the cert is my *.domain.com but I'm still getting a Cert
>> Error.   "This Certificate cannot be verified up to a trusted certification
>> authority"  What did I miss?
>> 
>> Thanks
>> 
>> Scott
>> 
>> ASA 8.4.4
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/




More information about the cisco-nsp mailing list