Forum Discussion

tatsu's avatar
tatsu
Icon for Nimbostratus rankNimbostratus
Mar 09, 2020

How to update CRL file in the other route domain with tmsh.

Normally, how to update the CRL file is using below command.

I want to know how to update CRL file in the other route domain(ex. RD5) with tmsh.

tmsh modify /sys file ssl-crl MYCRL.crl source-path http://crildistributeurl/crl/MYCRL.crl
 
or 
 
tmsh modify /sys file ssl-crl MYCRL.crl source-path file:/var/tmp/CRL/MYCRL.crl

I'm going to update crl file with daily cron.

Regards,

BIG-IP
security
TMSH
  • Mayur_Sutare's avatar
    Mayur_Sutare
    Icon for MVP rankMVP
    Mar 09, 2020

    You can try by changing route domain first under tmsh using command -

     

    rdsh <route domain id> e.g rdsh 5 in your case.

     

    Hope it helps!

  • tatsu's avatar
    tatsu
    Icon for Nimbostratus rankNimbostratus
    Mar 10, 2020

    Hi.

    ​

    I tried rdsh command, but it didn't work.

    ​

    I did below,

    # rdsh 5
# tmsh create sys file ssl-crl MYCRL.crl source-path file:/var/tmp/CRL/Latest.crl

    It seemed that I successed to change the route domain.

    ( I saw IP address on RD5 with ip a command.)

    But, MYCRL.crl file was created on Common partition.

    ​

    Did I mistake using command?