F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

jstaf's avatar
jstaf
Icon for Nimbostratus rankNimbostratus
Dec 02, 2010

Multiple (many) OCSP responders, multiple CAs and certificate check

Hello,     Is there a way to check certificates revocation status for a pre-loaded list of trusted CAs (50 to 100), just like a browser would do ?   The BIG-IP should extract the AIA field fr...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 21, 2012
I think this should be possible now with a hotfix on 10.2.4 or any 11.x version:

 

 

sol12570: The BIG-IP SSL OCSP authentication module does not honor AIA extensions in client certificates

 

https://support.f5.com/kb/en-us/solutions/public/12000/500/sol12570.html

 

 

Aaron