Forum Discussion

Rene_C_'s avatar
Rene_C_
Icon for Nimbostratus rankNimbostratus
Apr 17, 2018

CRLDP Authentication Profile

Hi,   anyone knows how i can configure a HTTP CRL Endpoint (http://crl.internal.com/bla/test.crl) in the authentication profile for CRLDP? I only see the IP/Host and BaseDN options there. Or is th...
BIG-IP
LTM
security
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Jan 11, 2019

Hi Rene C.,

HTTP based CDPs are explicitly not supported by CRLDP based Authentication Profiles...

Note: Using HTTP URLs to define servers in CRLDP authentication for client certificates in BIG-IP LTM is not supported.

Source: https://support.f5.com/csp/article/K12975

You may check out the links below for alternative methods to use and auto-update HTTP based CRLs...

https://devcentral.f5.com/questions/sharing-icall-for-crl-update

https://devcentral.f5.com/codeshare/sample-linux-script-to-update-crl-file-from-certificate-authority

Cheers, Kai