Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 25 replies
  • Subscribers 1 subscriber
  • Views 13966 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

iOS 5 and vpn

mdl1
Hello,
I upgraded an iphone to iOS 5 and since Then I cannot connect my vpn. The connection is refused saying it cannot validate the server certificate. I tried with another ipad ios4 and it works perfectly. 
Any feedback on this issue is much appreciated. 

Mourad Dahoumane


This thread was automatically locked due to age.
Parents
  • 0
    Hi there,

    just wanted to reply that Re-Generating the signing CA certificate (Remote-Acess->Certificate Management->Advanced) worked. Afterwards its an SHA1 certificate with 1024 bit length.

    But also the second requirement is a 2048bit length Certificate unter Remote-Access->Cisco VPN Client->Global->Server certifcate , else VPN wont work even with all certificates in Chain beeinng SHA1 certificates.

    So both requirements are true. Just wanted to state this, because in the known issues, the 2048bit requirement isnt there anymore.

    Site-to-Site VPN didn't break, because Local RSA Pub Key didn't change. All other our Site-to-Site VPN connections where preshared keys.

    Thanks for responding. [:)]
Reply
  • 0
    Hi there,

    just wanted to reply that Re-Generating the signing CA certificate (Remote-Acess->Certificate Management->Advanced) worked. Afterwards its an SHA1 certificate with 1024 bit length.

    But also the second requirement is a 2048bit length Certificate unter Remote-Access->Cisco VPN Client->Global->Server certifcate , else VPN wont work even with all certificates in Chain beeinng SHA1 certificates.

    So both requirements are true. Just wanted to state this, because in the known issues, the 2048bit requirement isnt there anymore.

    Site-to-Site VPN didn't break, because Local RSA Pub Key didn't change. All other our Site-to-Site VPN connections where preshared keys.

    Thanks for responding. [:)]
Children
No Data