Cisco Configuration Professional Not Discovering Router

@dheckaman wrote:

Not much experience with CCP. I am studying for CCNA Security and trying to get more familiar with it.

When running the CCP discovery process I am receiving the following error :
"Discovery could not be completed because security certificate was rejected"

I configured the router :
Router(config)# line vty 0 15
Router(config-line)# login
Router(config-line)# transport input ssh
Router(config-line)# transport output ssh
Router(config-line)# exit
Router(config)# ip http secure-server
Router(config)# ip http authentication local
Router(config)# username privilege 15 password 0

I have debug enabled for SSL -
*Jul 28 18:50:34.478: CRYPTO_OPSSL: SSL3.0 is no longer supported.Enabling only TLSv1
*Jul 28 18:50:34.486: opssl_SetPKIInfo entry
*Jul 28 18:50:34.536: opssl_SetPKIInfo done.
*Jul 28 18:50:34.542: Handshake start: before/accept initialization
*Jul 28 18:50:34.547: SSL_accept:before/accept initialization
*Jul 28 18:50:34.548: SSL_accept:error in SSLv3 read client hello B
*Jul 28 18:50:34.550: 0:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:../VIEW_ROOT/cisco.comp/pki_ssl/src/openssl/dist/ssl/s3_pkt.c:313:

Is this telling me that CCP is using SSLv3? Is there a way to force it to use TLSv1?

Thanks

Posts: 1

Participants: 1

Read full topic