Dears,

Actually it was a problem of CA root certificate, we should import the root
certificate other than the user certificate.
Thanks a lot.

BR,
Ziad Kassab


On Wed, Apr 17, 2013 at 10:51 AM, Mikael Gustafsson <
[email protected]> wrote:

>  Hi Ziad,
>
>  Have you tried the iPhone Configuration Utility?
> Im have not tried to add certificate on a iPhone, but used it to create a
> dot1x profile for OS X Mt Lion.
>
>
>  Windows - http://support.apple.com/kb/dl1466
> Mac - http://support.apple.com/kb/dl1465
>
>
>
> // Micke
>
>  On 4 apr 2013, at 23:26, ziad kassab <[email protected]> wrote:
>
>  Dear Pieter,
>
>  Actually i am using the built-in Ipsec client, no i didnt import the
> root certificate . i am trying very hard to find any document that shows
> how to do this. and i cant find any useful one. No clear documentation
> about this feature. i have imported the certificate .pfx from the CA Server
> directly to the phone and while create the certficate, i have added the
> attribute san:dns=192.168.1.254 where this is the Ip of the outside
> interface.
>
>  Please if you have any hints or clue on how to do it, i appreciate it.
>
>
>
> On Fri, Apr 5, 2013 at 12:19 AM, Pieter-Jan Nefkens <
> [email protected]> wrote:
>
>> Hello Ziad,
>>
>>  Have you added the root CA certificate to your iphone in a profile?
>>  Are you using anyconnect ipsec or the iOS built-in VPN client? If the
>> first, you would have to import the root CA certificate into the anyconnect
>> app as well
>>
>>
>>  PJ
>>
>>  On 4 apr. 2013, at 18:34, ziad kassab <[email protected]>
>>  wrote:
>>
>>   Dears,
>> i m trying to do Remote access VPN (IPSec) on ASA with CA Server on my
>> iphone. it is not working and i am getting the error message could not
>> validate server certificate. Anyone faced this issue before? is there any
>> attribute that should be added?
>> Thanks in advance.
>>  _______________________________________________
>> For more information regarding industry leading CCIE Lab training, please
>> visit www.ipexpert.com
>>
>> Are you a CCNP or CCIE and looking for a job? Check out
>> www.PlatinumPlacement.com <http://www.platinumplacement.com/>
>>
>>
>>       ---
>> Nefkens Advies
>> Postbus 721
>> 4200 AS Gorinchem
>>
>>  Tel: +31 183 722 095
>> GSM: +31 643057746
>>
>>  Email: [email protected]
>> Jabber: [email protected]
>> Web: http://www.nefkensadvies.nl/
>>
>>  *** Nefkens Advies steunt Alpe d'huzes. Steunt u ons ook? ***
>> http://deelnemers.opgevenisgeenoptie.nl/teams/nefkens-advies/
>>
>>
>  _______________________________________________
> For more information regarding industry leading CCIE Lab training, please
> visit www.ipexpert.com
>
> Are you a CCNP or CCIE and looking for a job? Check out
> www.PlatinumPlacement.com
>
>
>
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit 
www.ipexpert.com

Are you a CCNP or CCIE and looking for a job? Check out 
www.PlatinumPlacement.com

Reply via email to