Cisco Firepower 4110 Preparative Procedures & Operational User Manual page 41

Cisco Preparative Procedures & Operational User Guide
in the peer's certificate chain
Any certificate revoked in the
peer's certificate chain
One CDP is missing in the peer's
certificate chain
One CDP CRL is empty in the
peer's certificate chain with valid
signature
Any CDP in the peer's certificate
chain cannot be downloaded
Certificate has CDP, but the CDP
server is down
Certificate has CDP, server is up,
and CRL is on CDP, but the CRL
has an invalid signature
Table 4 Certificate Revocation Check Mode set to Strict with a local static CRL
With local static CRL
Checking peer certificate chain
Checking CDP in peer certificate
chain
CDP checking for Root CA
certificate of the peer certificate
chain
Any certificate validation failure
in the peer certificate chain
Any certificate revoked in the
peer certificate chain
One CDP is missing the peer
certificate chain
© 2016 Cisco Systems, Inc. All rights reserved.
message
Connection fails with syslog
message
Connection fails with syslog
message
Connection fails with syslog
message
Connection fails with syslog
message
Connection fails with syslog
message
Connection fails with syslog
message
LDAP Connection
Full certificate chain is required
Full certificate chain is required
Yes
Connection fails with syslog
message
Connection fails with syslog
message
Connection succeeds
message
Connection fails with syslog
message
Peer certificate: connection
fails with syslog message
Intermediate CAs: connection
succeeds
Connection succeeds
Peer certificate: Connection
fails with syslog message
Intermediate CAs: connection
succeeds
Peer certificate: Connection
fails with syslog message
Intermediate CAs: connection
succeeds
Peer certificate: Connection
fails with syslog message
Intermediate CAs: connection
succeeds
IPSec Connection
Full certificate chain is required
Full certificate chain is required
Not applicable
Connection fails with syslog
message
Connection fails with syslog
message
Connection succeeds