Forum Discussion

Alexander_Poly1's avatar
Alexander_Poly1
Icon for Altocumulus rankAltocumulus
Nov 06, 2018

Is it possible to use CRLDP in Server SSL Profile?

Hello,   I need to check backend server’s certificates before processing client request. I am using option in «SSL Server Profile» named Server “Server Certificate > Require». All works fine but I...
application delivery
LTM
security
server ssl profile
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Nov 06, 2018

Yes in BIG-IP v13.1 and above. You have three options in the server SSL profile:

 

  • OCSP - performs OCSP stapling if available or direct OCSP query if the server certificate contains an OCSP responder URL in its AIA field.
  • CRL File - revocation checking based on a locally-imported CRL file.
  • CRL - uses the CRLDP attribute in the certificate to fetch a remote CRL.