Forum Discussion

EP1's avatar
EP1
Icon for Altocumulus rankAltocumulus
Apr 17, 2020

Support dynamic CRL check for clientSSL profile (BIG-IP 15.1)

Hi,   Did anyone tested  (dynamic) CRL validator object for client SSL profile? (BIG-IP v15.1): It should work in v 15.1 (fixed bug 743758 -  https://cdn.f5.com/product/bugtracker/ID743758.html ) ...
application delivery
BIG-IP
certificate
clientssl
crl
crldp
LTM
security
MAbbas's avatar
MAbbas
Icon for Cirrus rankCirrus
Mar 07, 2022

Hi - i followed the steps specified above but CRL checks are not working on my device 

i have 16.1 running - i created resolver and forward zone in it - 

also created a proxy and pool 

neither the Dns resolver - nor the proxy pool are getting any hits . meaning counters are 0 

and i get the same error message EP1

 

EP1's avatar
EP1
Icon for Altocumulus rankAltocumulus
Mar 29, 2022

Hi,

I've included root certificates to Advertised and Trusted bundle, and that solved this error...