For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

petras123_10972's avatar
petras123_10972
Icon for Nimbostratus rankNimbostratus
Apr 23, 2012

Automaticlly update CRL

Hi All,   Is possible configure auto-update the CRL?   I have BIG-IP v 11. From CA I have downloaded and imported the CRL file. In the Client SSL profile I have configured: Cert - required ... a...
config
design
Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Aug 13, 2014
Note that for the APM use case of: 1- Request and get client certificate. 2- Validate certificate against CA cert. 3- Check client certificate against CRL hosted on an external HTTP server during Access Policy execution.. It now works correctly. Versions prior to 11.4.0 did not support CRLDP via HTTP. 11.4.0+ does support this, so for APM client use, the problem should be resolved and any kind of script should not be required.