Hi Jörg, sorry, didn't see that your first name ist Jörg instead of Julius. Yes, upgrading the Cisco IOS is also a good solution. Also check the bug lists of cisco to prevent that you are not running in other problems. For example if you want to use certificate validation with ocsp, you need to have a very new IOS which my routers didn't support because they had too less ram and flash. On older IOS a ocsp request of the router will crash the router and force a restart ;-) Checking via crl worked good with my IOS versions, but then all the advantages of ocsp get lost.
Kind regards, Matthias On 6/1/07, Geier Julius <[EMAIL PROTECTED]> wrote: > Hi Matthias, > it seems to be the same installation as yours. X500:DN is version 0.28 and > Parse::RecDescent is version 1.94. > > But - after upgrading the IOS on the routers I can change the order of "name > -- value" peers in the certificate request without problems. So there the > pressure to solve the problem is gone. > > For now I can live with this solution, but in the future we will have a huge > rollout (more than 1000 routers). At that time I would not really appreciate > to change every request by hand! ;-) An other solution would be a little > perl-script for automatic reorder of the DN. But that would only cure the > syptoms - not the disease ;-). > > Thanks for support and best regards > > Jörg Kirmße > > _________________________________________________________________ > Express yourself instantly with MSN Messenger! Download today it's FREE! > http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ > > > > ------------------------------------------------------------------------- > This SF.net email is sponsored by DB2 Express > Download DB2 Express C - the FREE version of DB2 express and take > control of your XML. No limits. Just data. Click to get it now. > http://sourceforge.net/powerbar/db2/ > _______________________________________________ > Openca-Users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openca-users > > ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
