For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Konstantin_Nach's avatar
Konstantin_Nach
Icon for Nimbostratus rankNimbostratus
Sep 29, 2015

Update of CRL from REST Api

Hello, we are using the REST Api to install certificates and CRLs.

 

For certificate when we run the command again the file is updated but for CRL it gives error: 01020066:3: The requested Certificate Revocation List File (/Common/lb-00000002.crl) already exists in partition Common.

 

Any ideas ?

 

application delivery
cloud
iControlREST
LTM
vmware

2 Replies

  • Konstantin_Nach's avatar
    Konstantin_Nach
    Icon for Nimbostratus rankNimbostratus
    Sep 29, 2015
    For installing CRL we are making post request to /mgmt/tm/sys/crypto/crl with the following JSON {"command":"install","name":"lb-00000002","from-local-file":"/shared/tmp//Certificate Revocation List.crl"}
  • amolari's avatar
    amolari
    Icon for Cirrostratus rankCirrostratus
    Oct 02, 2015

    we update the CRL through bash script (tmsh commands) and as far as I remember we also get this error message if there is a change in the CRL. But the CRL gets updated. Have you verified if it's updated/working (although you get the error message)?

     

    CRL handling has always been a pain with BIGIP (and one gets always the answer "use OCSP" from F5 support) :-(

     

    Alex