Forum Discussion
awan_m
Cirrostratus
CirrostratusF5 to read a combined CRL file
Hello , i have a client ssl profile which uses a crl file that is uploaded to F5 every night . Now i have a second CRL file . Question - can the F5 read a file that is a combination of 2 CRL files ...
VGF5
Cumulonimbus
CumulonimbusGiven the error you encountered, it seems you are trying to use a command [CRL::verify] that isn't supported. Instead, focus on configuring the SSL profile correctly to handle CRLs natively within the F5 BIG-IP system
Here are the general steps to configure the SSL profile to use a CRL in F5 BIG-IP version 17:
- Upload the CRL File:
- Navigate to System > File Management > SSL Certificate List.
- Click Import.
- Set the Type to Certificate Revocation List.
- Specify the File Name and Source (either upload from your local machine or provide the URL if the CRL is hosted online).
- Configure the Client SSL Profile:
- Navigate to Local Traffic > Profiles > SSL > Client.
- Select or create the Client SSL profile you wish to configure.
- In the Revocation Handling section, select the CRL you uploaded from the Certificate Revocation List dropdown.
- Apply the SSL Profile:
- Ensure that the SSL profile is associated with the relevant virtual server that handles the incoming client connections.
awan_mi guess you are an AI bot - as you suggested the command [CRL::verify] and then stated command is not supported - :)
