For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ray_74718's avatar
Ray_74718
Icon for Nimbostratus rankNimbostratus
Dec 11, 2013

Failed to initialize OCSP Auth Module

Hi all,

 

I want to implement OCSP Auth with APM to Microsoft PKI. On-Demany-Cert Auth is working. I don't see any communication in tcpdump to ocsp responder.

 

Erro Message: 'failed to initialize OCSP Auth module'

 

Debug output:

 

Following rule 'Successful' from item 'On-Demand Cert Auth' to item 'OCSP Auth' Dec 11 16:20:24 bigip debug apd[5842]: 01490011:7: 84bd934a: OCSP agent: ENTER Function executeInstance Dec 11 16:20:24 bigip warning apd[5842]: 01490146:4: 84bd934a: OCSP Auth agent: Failure status 'Failed to initialize OCSP Auth Module' Dec 11 16:20:24 bigip debug apd[5842]: 01490012:7: 84bd934a: OCSP agent: LEAVE Function executeInstance Dec 11 16:20:24 bigip info apd[5842]: 01490004:6: 84bd934a: Executed agent '/Common/client-cert-auth-user_act_ocsp_auth_ag', return value 0 Dec 11 16:20:24 bigip debug apd[5842]: 01490000:7: ./AccessPolicyProcessor/SessionState.h func: "clearTempSessionAgentState()" line: 85 Msg: Agent did not initiated the scheduled agent

 

I tested this with 11.2.1 and 11.4.1 with same result.

 

Would be very much appreciated if someone could tell me how to fix this.

 

THX