Forum Discussion

sebbenw_230133's avatar
sebbenw_230133
Icon for Nimbostratus rankNimbostratus
Mar 24, 2016

need to accept several CA on one virtual server

Hi, I am a new user with F5 LTM and I have some problem with configuring my virtual server to manage several CA:s. The problem I am having is how to manage the CRLs. It seems that I can only check th...
devops
iRules
LTM
security
Hannes_Rapp's avatar
Hannes_Rapp
Icon for Nimbostratus rankNimbostratus
Mar 29, 2016

Yann's answer is a good solution, but there are limitations. I do not remember the exact BigIP version, but I got the same error whenever my generic bundle-certificate files got larger than ~100 certs per file. I believe if you use CRL your limits are higher, but they exists. The numbers probably are higher with more recent BigIP versions. You may contact F5 to get a confirmation of limitations, and exact figures for your version; or just keep decreasing the number of certificates, until it works.

 

Apart from that, you will need to look for a workaround where the CRL is hosted externally.