From: Driessens.Hans (hans.driessens@siemens.com)
Date: Tue Dec 16 2003 - 06:02:24 GMT-3
Hi Jim
jep, the ca is in auto-approve mode but the problem is requesting the
certificate from the ca itself, (authenticating the ca). The enrollment of
my own ca should be the next step (if the first step would succeed:(
I hooked up a sniffer and captured the request from the pix and compared it
with a request from a router... couldn't find any differences in the request
so i'm a bit lost....could be a clock issue. I don't really now how the
timezone influences (?) everything (is the pix on gmt, utc or cet and what
about the ca) there might be a misconf in this area
I'm quite sure that the config of the pix is ok so I kinda decided to let it
go and accept that this doesn't work. I'm starting the security lab in about
22 hours from now so its about time to start the panic
cheers
Hans
-----Oorspronkelijk bericht-----
Van: Jim [mailto:systemboard@excite.com]
Verzonden: Tuesday, December 16, 2003 8:10 AM
Aan: hans.driessens@siemens.com; security@groupstudy.com;
ccielab@groupstudy.com
Onderwerp: RE: pix with microsoft ca server
Hi Hans,
Are you approving the request in the CA server? If not, you will have to
approve the issuance of the Cert for it to be sent back to the router.
JT
This archive was generated by hypermail 2.1.4 : Sat Jan 03 2004 - 08:25:41 GMT-3