Failed to use own CA and sub-CA

Hello everybody,
I am having an issue with using my own CA.
I have the certificates from the CA and sub-CA at hand in all kinds of formats (.der, .pem, .p12)
I've created the trustpoint (MAINCA) in ASA via CLI and provided details (subject-name, fqdn, enrollment terminal, NO SERIAL)
I've generated the CSR on the ASA from CLI with no problems (enroll the trustpoint).
I've saved the CLI output of the CSR to a file
I let the sub-CA process the CSR - and the CA has processed it as well just to give it a try
I've the Certificate ready formated as .der and .pem
As mentioned in Cisco Documentation I now have to authenticate the trustpoint with
crypto ca authenticate MAINCA
where the trustpoint-name is the same as the one from creating a trustpoint just a little earlier.
I can paste the characters from the .pem-file of either, the CA or the sub-CA with no problem at all
I finish as asked with quit
I get the info that certificate has a fingerprint - ok - and if I would like to accept the certificate - yes is what I entered.
The process is, however, aborted with:
% Error in saving certificate: status = FAIL
I started a debug as well - but I don't get it
CRYPTO_PKI: can not set ca cert object (0x701)
CRYPTO_PKI: status = 65535: failed to process RA certificate
CRYPTO_PKI: Cleaned PKI cache successfully
CRYPTO_PKI: Starting to build the PKI cache
CRYPTO_PKI: Failed to retrieve router cert
CRYPTO_PKI: Failed to cache certificate chain for the trustpoint MAINCA or none available
CRYPTO_PKI: Failed to retrieve trusted issuers list or no trustpoint configured
Can somebody clear the sky, please?

AFAIK the ASA does not handle CA hierarchy. You can use the sub-CA in your trustpoint. You may create another trustpoint for the root CA but it's not necessary.

Similar Messages

EXTENDED_PROGRAM_CHECK please explain this FM and uses of this and Sub FM

EXTENDED_PROGRAM_CHECK please explain this FM and uses of this and Sub FM
Points Awarded if useful answer,

Hi,
This is FM for extended program checking. Description of implemented tests when making the test selection.
This same same as the extended program check of the SE38 program.
Open any program in ABAP editor.
Goto program->check->extended program check.
Select the check boxes and execute. It displays all the error and warning of the selected crieteria. Now you can check all these error conditions. The FM is for achieving the same functionality
Hope this helps.
Regards,
Richa

Using own modem and router

Hi,
I've decided not to use the home hub 4 and to use my own modem equipments.
I was told that I only need to enter [email protected] as login name and password as password, then internet should work...
It is strange because the modem could get an IP from the DNS, but there's no internet connection.
I already followed the steps here: http://btbusiness.custhelp.com/app/answers/detail/a_id/258/~/can-i-use-my-own-broadband-modem-or-rou...
any ideas?
thanks
Solved!
Go to Solution.

thanks for your responses.
yes, I tried different login names and passwords. I knew they worked because the modem managed to detect the upstream and downstream speed, as well as the ip address, DNS server, etc...
I did a ping check through the modem and it said it worked... strangely, the ADSL loopback check was failed.
Other settings were UK default, ie. VC, PPPoA, 0,38... I am using a Zyxel P-660R-D1.
Key thing is I am using a separate modem and router, both of them are high quality equipment because i'll be setting up a server to do cloud storage. Also i prefer not to use all in one model-router coz I think separate equipments just work better.
So any ideas? Is there anything special about the Homehub that BT isnt telling us, whereas we need HH in order to get on internet??
Thanks

Using own background and changing number of chapters

Hello all,
I'm on DVDStudPro 3 and using the Oreilly "In the Studio book" by Marc Loy. Project is a wedding. I'm a newbie as you will be able to tell.
My top menu is a layered menu (ceremony, reception etc..,) and I want to create a submenu for each of the main items on the top menu; you click on ceremony and go to a submenu for the ceremony chapters. For the submenu I am using a background I have made (no layers) and want to have the chapters listed on this background. I drag the background tiff in but when I drag in the movie file and choose make chapter connections DVD wants me to choose an Apple template. I just want ALL the chapters listed by text on this submenu tiff and all on that one screen.
Couldn't find anything on search.
Thanks,
Al

Chris,
No my background was just a graphic I created.
I was hoping that when I dragged/added my movie to the background while choosing create chapter index & make connections that it would automatically list the chapters but it will only do that as far as I can tell if I choose a DVD template.
So when using my own background I have to write all the chapters/text on the graphic in Photoshop and then draw buttons around each chapter in DVDSP?
Figured it was like iDVD where the chaps auto appear when you drag the movie in.
Thanks,
Al

Re: using own modem and router

Can anyone help with a query.
I have tried a Netgear 4500 router and it works better, with a higher speed, than the home hub.
BUT I cannot access Vision using it - so I am back to HH4 and slower access.
Are there any settings needed in a non BT router to allow the BT TV to work?
Thanks in advance.....

This link may help.
Known Routers to Work with Multicast/IGMP
There is a thread regarding multicast here.
http://community.bt.com/t5/YouView-from-BT/Known-Routers-to-Work-with-Multicast-IGMP/td-p/994338
If you are not on multicast, then it may simply be a DNS issue.
Using BT Vision with other routers
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Introspection Failed when using FBean.Register_Bean() and JInitiator

I am posting this for the benefit of others who might run into it when using the 'enhanced JavaBeans support' in Forms 9i. Under certain circumstances, an FBean.Register_Bean() might silently fail.
Those circumstances include:
<li> the JavaBean you are attempting to register extends {font:Courier}javax.swing.JPanel{font}
<li> the runtime environment is JInitiator Version 1.3.1.9
Whether this is affecting you or not can be determined by using FBean.Set_Logging_Mode('MyBeanArea',1,FBean.LOG_ALL) as described in the help topic {font:Courier}How to Add JavaBeans using Enhanced JavaBeans Support -> Working In Debugging Mode{font}. If you do this, you might get output like the following in JInitator's console.
Failed to introspect class: class package.TestBean java.lang.NullPointerException
for example:
Forms Applet version is : 90290
*** VBean null PropertyManager for id = FOREGROUND
*** VBean Got FOREGROUND = null
*** VBean null PropertyManager for id = BACKGROUND
*** VBean Got BACKGROUND = null
*** VBean null PropertyManager for id = FOREGROUND
*** VBean Got FOREGROUND = null
*** VBean null PropertyManager for id = BACKGROUND
*** VBean Got BACKGROUND = null
*** VBean Setting debugMode to ALL
*** VBean Setting beanName to au.com.thrivesoftware.comet.hackery.TestBean
*** au.com.thrivesoftware.comet.hackery.TestBean Registering properties
*** au.com.thrivesoftware.comet.hackery.TestBean     int pWidth
*** au.com.thrivesoftware.comet.hackery.TestBean     int pDebugGraphicsOptions
*** au.com.thrivesoftware.comet.hackery.TestBean     int pHeight
*** au.com.thrivesoftware.comet.hackery.TestBean     boolean pOpaque
*** au.com.thrivesoftware.comet.hackery.TestBean     javax.swing.InputVerifier pInputVerifier
*** au.com.thrivesoftware.comet.hackery.TestBean     Failed to introspect class: class au.com.thrivesoftware.comet.hackery.TestBean java.lang.NullPointerException

I extended BeanWrapper in my bean class that did the trick.

Synchronization from OID to AD failed by using ActiveExport profile

Hi All
Synchronization from OID to AD failed by using ActiveExport profile
and i use copy activeexp.map.master that contains
DomainRules
cn=Users,dc=software,dc=raya,dc=corp:CN=Users,DC=twa,DC=com:
AttributeRules
# Organizational Unit Mapping
ou: : :organizationalunit:ou: : organizationalunit
# Container mapping
cn: : :orclcontainer: cn: :Container
#Domain cannot be exported
#name: : :domain: dc: :domain
cn:1: :inetorgperson:cn: :User
cn:1: :inetorgperson:SAMAccountName: :User
# attribute rule for mapping Active Directory LOGIN id
#mail: : :person:sn: :User:
mail: : :person:UserPrincipalName: :User:
# attribute rule for mapping entry and to create orclUserV2
# There should be a mapping rule with orcluserv2 objectclass
# without which the PORTAL may not function properly
cn: : :inetorgperson:givenname: :person
givenName: : :person:displayName: :person
# mail needs to be assigned valid value for default settings ing DAS
mail: : :inetorgperson:mail: :person
# The next mapping rule is for synchronizing password from OID to AD.
# Additional configuration is required. Please refer to DIP documentation
# for details.
# NOTE - To synchronize password from OID to AD, uncomment the next rule.
# userpassword: : :person:unicodepwd: :person:
# Setting useraccountcontrol to "544" (0x220) means
# 1) regular account 2) password not required 3) user account is enabled
cn: : :person:useraccountcontrol: :person:"544"
mobile: : :inetorgperson:mobile: :organizationalperson:
# GROUP ENTRY MAPPING RULES
cn: : :orclgroup:cn: :group:
# This will work successfully only when cn doesn't have any
# special characters associated with it.
cn: : :orclgroup:SAMAccountName: :group:
uniquemember: : :groupofuniquenames:member: :group:
when i check the log file i found
Trace Log Started at Mon Jul 24 07:54:58 EEST 2006
tampro.Twa.com:389
rdn value is missing in change record when performing insert operation. Please ensure that required mapping rule is specified in the profile.
java.lang.NullPointerException
at oracle.ldap.odip.gsi.ActiveWriter.insert(ActiveWriter.java:286)
at oracle.ldap.odip.gsi.LDAPWriter.writeChanges(LDAPWriter.java:272)
at oracle.ldap.odip.engine.AgentThread.mapExecute(AgentThread.java:581)
at oracle.ldap.odip.engine.AgentThread.execMapping(AgentThread.java:306)
at oracle.ldap.odip.engine.AgentThread.run(AgentThread.java:200)
null
ActiveExport:Error in Mapping Enginejava.lang.NullPointerException
java.lang.NullPointerException
at java.io.Writer.write(Writer.java:126)
at java.io.PrintStream.write(PrintStream.java:303)
at java.io.PrintStream.print(PrintStream.java:462)
at java.io.PrintStream.println(PrintStream.java:599)
at java.lang.Throwable.printStackTrace(Throwable.java:461)
at oracle.ldap.odip.engine.ODIException.printStackTrace(ODIException.java:296)
at oracle.ldap.odip.engine.AgentThread.mapExecute(AgentThread.java:740)
at oracle.ldap.odip.engine.AgentThread.execMapping(AgentThread.java:306)
at oracle.ldap.odip.engine.AgentThread.run(AgentThread.java:200)
Updated Attributes
orclodipLastExecutionTime: 20060724075501
orclLastAppliedChangeNumber: 3833
orclOdipSynchronizationStatus: Mapping Failure, Agent Execution Not Attempted
orclOdipSynchronizationErrors: Unknown Error Encountered
Sleeping for 1 secs
can any one tell me what can i do ?

If its a very rare failure, then as you mentioned, you can skip it..

When I download firefox, using recommended setting, or my own, all the sub files/folders like plugins, modules, updater end up on the desktop as well as in the file location. And when I try to put them into the file location, they don't. And when I delete

When I download firefox, using recommended setting, or my own, all the sub files/folders like plugins, modules, updater end up on the desktop as well as in the file location. And when I try to put them into the file location, they don't. And when I delete them, FireFox won't open. I tried deleting FireFox and reinstalling it multiple times, and a message pops up sometimes that says FireFox may not have installed correctly, so I follow the steps, but all the extra icons on my desktop don't go away. This has happened every time I have downloaded FireFox. The browser itself works, but I need to know how to get rid of these icons, but still be able to use FireFox. This is on a new computer, with Windows 7.
== I downloaded FireFox. ==
== User Agent ==
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6

Managed to solve this myself. Just went to properties > hidden.

Can you save your own theme and button set up so I can use the same format

Can you save your own theme and button set up, so I can use this same format for similar content. I want to keep the button content and the theme the same without having to create it everytime? I am trying to streamline the process for multiple dvd's with the same menu and buttons but different content. Does that make sense?

I am only new to this caper too, but I am pretty sure you can save a theme as a favourite by pressing the "save theme as favourite" button under file. If you have edited an existing theme but don't want to lose it, make sure you untick the replace existing button.

New to FiOS, can I use my own modem and router

I saw several questions similar to mine, but none that I saw answered my question for my scenario. I am sorry if this is a duplicate. I am new to FiOS. I have no other services from Verizon and do not plan to get any. No phone, no television, nothing. Just Internet. God willing, the installation will take place in two days. My house already has coaxial cabling. I have my own cable modem, a SURFboard SB6121, which goes to my router, a TP Link TL-WR941ND. None of my equipment advertises that it is FiOS compatible. I've seen other people asking about using their own modem and router, but in those cases the scenario involved other bundled services, and I understand a FiOS router is necessary to forward ports to television, phone, and computers. However, in my very simple scenario, can the Verizon optical network terminal simply feed its output to my coax, from there to my modem, then router, then comptuers? Is there any reason that wouldn't work? Verizon technical support just gave me a machine that wanted to help me troubleshoot my Internet connection, and I couldn't get from there to a human. Thanks in advance for the help!

Banish the word and the device called "modem" from your home when using FiOS. FiOS does not use modems. Your cable modem is useless with FiOS. Do not plug it in. FiOS uses routers. The router connects to the ONT's WAN port using MoCA (coax) or Ethernet. The installer will enable one of the ONT's WAN ports. If you order 150Mbps or higher speeds, they will have to use Ethernet. For slower speeds, coax is the default. Many installers will use Ethernet if you ask nicely, but usually only if it isn't too much work. Make sure it's easy to connect a router to the ONT using Ethernet, and you should be okay. If Ethernet needs to be run through the walls, your best choice is get it done ahead of time. You can always call later and get the ONT's WAN port switched. The only routers available with a MoCA WAN port are the Verizon models. The Verizon routers are good devices for most users. People who like to tweak their networking gear don't like them as many advanced features are limited or locked down. You can't run any other router firmware on them. WiFi range is decent, but not great. I'm quite happy with my Quantum router. YMMV. If you get Ethernet WAN enabled, you can use any router you want. However, know that Verizon provides zero support for any other router. They won't even mention it as an option. That doesn't mean you can't use one, simply that you must do so without Verizon's help. There are reports that they won't even complete an install without one of their routers to verify service. If you don't use one of their routers, consider renting one for a month to complete the install or even buying a used one. If you own a Verizon router, you can install it if you ever suspect Verizon networking issues. This will allow you to call their support. This FAQ is very helpful:http://www.dslreports.com/faq/16077 Good Luck.

Hi, We have an application built using HTMl 5 and Javascript running on IPad2, iOS5.1 Safari 5.1. When we try to download a file(.pvw file) in that application safari throws "Download failed" error. Please suggest what needs to be done.

Hi,
We have an application built using HTMl 5 and Javascript running on IPad2, iOS5.1 Safari 5.1.
When a file url is clicked instead of asking for Save or Open or Cancel options, the file gets opened on IPad by default.
Is this default behaviour which cannot be changed or can it be configured to ask user preference?
When we try to download a file(.pvw file -> a model file) in the above application, safari throws "Download failed" error.
Please suggest what needs to be done.
Regards,
Pramod

Safari on an iPad in general does not allow downloading of files. That's a safety precaution in the iOS SDK to keep unauthorized content off of iOS devices. Safari will open from the web site file types that it can handle, but direct downloading isn't normal behavior, and I don't believe the behavior can be changed, though you can try asking in the developer forum, either here or the one to which you have access as a member of Apple's iOS developer program.
Regards.

Im having problems with my Kids facetime accounts that seem to be because they are both using my itunes and there are conflicts with multiple email addresses? Is it possible to now set the kids up with their own accounts without losing their apps etc

Hi All,
I have my kids using iTunes via thier ipods etc through my own account and this hase been the case for some time?
This has started to cause issues lately with imessaging and facetime, as there seems to be a limit on email addresses that can be associated with one account?
I wonder if I would be best off setting the kids up with their own accounts, but want to be able to do this without them losing their existing apps, music etc?
Is this possible, if so is there a simple process cos I can seem to find anything relating to this?
many thanks, Jim

Not going to happen the way you want it to.
When you add a gift card balance to the Apple ID, it's available for the Apple ID.
Probably best to create unique Apple ID's for each... this will also make things easier in the future as purchases are eternally tied to the Apple ID they were purchased with.

My wife and I each have our own apple ID's which we use on our own iPhones and iPads. We share an iMac. Is there a way of enabling Facetime on the iMac to accept calls to either of our IDs without the need to login as that particular user?

My wife and I each have our own apple ID's which we use on our own iPhones and iPads. We share an iMac. Is there a way of enabling Facetime on the iMac to accept calls to either of our IDs without the need to login as that particular user?

no, when using facetime you log in with the apple id you want people to reach you at, so unless you both agree to share one apple id for all the facetime you do, it will be necessary for you to logout and login each time you use the application.

When trying to upload a document or attach a document in an email Firefox gives me an error "Failed to load CTDFMRES.dll" and stops responding, I have no issues in any other browsers. And I am using Firefox 4, Fixes???

When trying to upload a document or attach a document in an email Firefox gives me an error "Failed to load CTDFMRES.dll" and stops responding, I have no issues in any other browsers. And I am using Firefox 4, Fixes???

You don't have to disable any addons or extentions!!!You guys are not going to believe this I figured out the problem it's really dumb...ok here goes the attachment uploader loads seperate so I got to thinking it's a popup so I went to options content and under block pop ups there is an option exceptions click on that and in the box type firefox.com and hit allow pow its fixed!!!!! :-)

I am using itunes 10 and trying to consolidate my files. I keep getting the error "Copying files failed. The file name was invalid or too long". How can I indentify what file is causing this problem or resolve this issue?

I am using itunes 10 and trying to consolidate my files. I keep getting the error "Copying files failed. The file name was invalid or too long". How can I indentify what file is causing this problem or resolve this issue?

BUMP
Yes, I just get that message. I don't see how I could investigate this problem.
I didn't mention that this happened when I was consolidating my library, not copying files to another computer.
In other words, I'm using a "normal" itunes procedure, itunes won't complete it, and won't tell me exactly why or how to figure out how to fix it...
Is there at least some easy way to tell which files were successfully copied to my itunes music folder so I can work on moving the uncopied files?
Can anybody help me?

Failed to use own CA and sub-CA

Similar Messages

Maybe you are looking for