RA-certificates and KeyUsage, BasicConstrains etc.

[Magnus Hessel <magnus.hessel@xxxxxxxxxxx>]

I observe strange behavour when using my 1700 router with IOS 12.0.5T router
software.

Q1:
	A: Can I have a single RA certificate or has it got to be one for
encryption and one for signature? 
	B: If yes on A, what certificate data are required to be set?
Q2:
	If I use multiple RA certificates, which keyusage MUST and MUST NOT
be set for encryption and signature respectively.
	My observation is that if keyencipherment is set but not
digitalsignature, then the certificate is considered an RA certificate.

Where can I get more information about required CA and RA certificate
profiles?
	
Best Regards/

Magnus Hessel
Software Engineer
-It's nice to be important, but it's more important to be nice.

iD2 Technologies -an Ericsson associate
Liljeholmsv. 14, P.O Box 44055, 100 73 Stockholm, Sweden
Phone: + 46 8 775 52 67
Fax:+46 8 726 79 12, E-mail: magnus.hessel@xxxxxxxxxxx
http://www.id2tech.com

> iD2 - Securing the Internet economy
> 
> 
>