Asa Cisco Cert

Vorbereitung auf Linuxclient

Zertifikat base64 kodieren

root@rome:/var/ssl/ca# base64 asa.xinux.org.p12

MIIOYQIBAzCCDicGCSqGSIb3DQEHAaCCDhgEgg4UMIIOEDCCCMcGCSqGSIb3DQEHBqCCCLgwggi0
AgEAMIIIrQYJKoZIhvcNAQcBMBwGCiqGSIb3DQEMAQYwDgQIQ2tZmeaU3QICAggAgIIIgDVwud5w
...
PehaszElMCMGCSqGSIb3DQEJFTEWBBSCs+yHYNuyMvqmidxthKtkBG87EzAxMCEwCQYFKw4DAhoF
AAQUvFzIoZIxqy9wcM8+GviY5SSBWK0ECAb59v8IkE7MAgIIAA==

• ciscoasa(config)# crypto ca import xinux-ca pkcs12 wirbelwind

Enter the base 64 encoded pkcs12.
End with the word "quit" on a line by itself:

MIIOYQIBAzCCDicGCSqGSIb3DQEHAaCCDhgEgg4UMIIOEDCCCMcGCSqGSIb3DQEHBqCCCLgwggi0
AgEAMIIIrQYJKoZIhvcNAQcBMBwGCiqGSIb3DQEMAQYwDgQIQ2tZmeaU3QICAggAgIIIgDVwud5w
...
PehaszElMCMGCSqGSIb3DQEJFTEWBBSCs+yHYNuyMvqmidxthKtkBG87EzAxMCEwCQYFKw4DAhoF
AAQUvFzIoZIxqy9wcM8+GviY5SSBWK0ECAb59v8IkE7MAgIIAA==
quit

Zertifikat für den ASM freischalte

• ciscoasa(config)# ssl trust-point xinux-ca
• ciscoasa(config)# ssl trust-point xinux-ca if-outside

Links

• http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/configuration/guide/asa_84_cli_config/access_certs.html