For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

FrontmanFin's avatar
FrontmanFin
Icon for Altostratus rankAltostratus
Apr 16, 2024

APM OCSP Responder Issues

I have:

in apm:

configured the OCSP responder under Access > Auth > OCSP Responders

                      ocspfqdn.com/ocsp

added it to the APM policy. 

I have a health monitor to the OCSP responder that is good (tcp)

But its not working. tcpdump shows:

 

09:12:43.591044 IP F5SELFIP.58606 > OCSPserver1.com: Flags [P.], seq 1:192, ack 1, win 229, length 191: HTTP: POST /ocsp HTTP/1.0 out slot1/tmm0 lis=

09:12:43.602954 IP OCSPserver1.com > F5SELFIP.58606: Flags [FP.], seq 1:462, ack 192, win 1027, length 461: HTTP: HTTP/1.1 404 Not Found in slot1/tmm0 lis=

 

I'm not quite sure what else I can do here. I will note that I implemented this:

https://my.f5.com/manage/s/article/K12552109

 

and it didn't work, but all i did was put the OCSP ip behind a simply virtual server, and then add the irule. I dont know if extra configurations were needed.

 

 

 

 

 

No RepliesBe the first to reply