EP1
Apr 17, 2020Altocumulus
Support dynamic CRL check for clientSSL profile (BIG-IP 15.1)
Hi,
Did anyone tested (dynamic) CRL validator object for client SSL profile? (BIG-IP v15.1):
It should work in v 15.1 (fixed bug 743758 - https://cdn.f5.com/product/bugtracker/ID743758.html )
I'm getting following errors for all client certificates:
err tmm1[21207]: 01a40008:3: Unable to build certificate trust chain for profile /clientssl_profile
tmm1[21207]: 01260009:4: clientIP:62042 -> VIP:443: Connection error: ssl_hs_do_crl_validation:6014: alert(46) unknown certificate error
With CRL File it works ok, but file does not automatically fetch, check, and cache CRL files…
Kr,
EPX