I can tell you that I have used DogTag 1.3 with Cisco based IPSec VPNs between routers (not using ASAs) with no problem – other than – I had to change the RSA hashing algorithm at setup to utilize SHA-1 instead of the default of SHA-256 – which the cisco routers I was testing with did not support.

Charles Jennings

From: pki-users-bounces@redhat.com [mailto:pki-users-bounces@redhat.com] On Behalf Of Ritter, Nicholas
Sent: Thursday, October 11, 2012 9:20 AM
To: pki-users@redhat.com
Subject: [Pki-users] Dogtag and certificate VPN

Is anyone using, or has tested, Dogtag with certificate based VPN? And more specifically with Cisco ASA Anyconnect and IPSEC VPN?

I searched through the dogtag mailing list archive and the Cisco forums and found someone tried to do this in 2010 and had problems that I can only assume there was no resolution to. The last posting I saw was someone giving the blanket vendor reason of “Cisco does not support that CA”. Given that there has not been a posting since, and that was two years ago, I was curious if anyone had tested/implemented it?

Nick