For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jstaf's avatar
jstaf
Icon for Nimbostratus rankNimbostratus
Dec 02, 2010

Multiple (many) OCSP responders, multiple CAs and certificate check

Hello,     Is there a way to check certificates revocation status for a pre-loaded list of trusted CAs (50 to 100), just like a browser would do ?   The BIG-IP should extract the AIA field fr...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 21, 2012
I think this should be possible now with a hotfix on 10.2.4 or any 11.x version:

 

 

sol12570: The BIG-IP SSL OCSP authentication module does not honor AIA extensions in client certificates

 

https://support.f5.com/kb/en-us/solutions/public/12000/500/sol12570.html

 

 

Aaron