revocation
3 TopicsDisable certificate revocation checking
I would like to be able to ignore revoked SSL server certificates for certain outbound HTTPS connections. The CA that issued those certificates is under my control. So my first thought was to create a local/static CRL (from my CA) that contained no revoked certificate serial numbers. Then I created a Server SSL profile which used that CRL in the Server Authentication section, and applied that profile to virtual server used for the outbound connection. The outbound connection worked fine until I revoked the server certificate. Now I get a "SSL Handshake failed" error during the connection attempt. So the F5 is clearly not using the local CRL. Am I misundertanding the purpose of a local CRL? Is there another/better way to accomplish this?Solved184Views0likes1CommentF5 oauth server refresh token revocation
Dear All, I am working on a F5 as the oauth server provider which provides JWT access tokens for oauth clients, everything works fine but now we want to know how to revoke the access / refresh tokens on the F5 oauth server. The endpoint is /f5-oauth2/v1/revoke in the payload post data we set the following parameters. client_id=we put the value here client_secret=we put the value here grant_type=refresh_token token_content_type=jwt refresh_token=we put the value here We receive the response below: "error":"invalid_request", "error_description":"Requiredparameter(access_tokenorrefresh_token)ismissing" } Someone an idea how to modify the request to allow revocation to occur on the F5 oauth server?1KViews0likes6Comments