Forum Discussion

chris100_263517's avatar
chris100_263517
Icon for Nimbostratus rankNimbostratus
May 11, 2016
Solved

APM CRLDP

Hello,   I'm configuring APM CRLDP for HTTP CRL retrieval and have a few questions about it. When you select pool or direct the base DN field must be populated. Does this mean that HTTP method is ...
BIG-IP Access Policy Manager (APM)
security
  • Yann_Desmarest_'s avatar
    Yann_Desmarest_
    May 11, 2016

    Hello,

     

    When you specify a destination, it's for ldap only. In latest versions you have a third option. When checked APM will look in the crldp field of your certificate

     

Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
May 11, 2016

Hello,

 

When you specify a destination, it's for ldap only. In latest versions you have a third option. When checked APM will look in the crldp field of your certificate

 

Yann_Desmarest_'s avatar
Yann_Desmarest_
Icon for Nacreous rankNacreous
May 12, 2016
If there is no crldp fields in the client cert, you can configure the Certificate Revocation List option in the Client Authentication settings within your clientssl profile. No need to add a CRLDP block in you VPE, a Client Certificate Inspection is enough