Bug ID 1583701: Access Policy Export does not write OCSP profile correctly to ng_export.conf

Last Modified: Jul 11, 2024

Affected Product(s):
BIG-IP APM(all modules)

Opened: May 03, 2024

Severity: 3-Major

Symptoms

After exporting an Access Policy, further import shows such error: Import error: 0107134a:3: File object by name (Common/Cert_Name_Example.crt) is missing. Unexpected Error: Loading configuration process failed.)

Impact

Unable to export/import Access policy

Conditions

- OCSP profile configured with "Verify Other" - OCSP Auth agent configured with such OCSP responder in an Access Policy

Workaround

On the BIG-IP system where the export is made: - Edit OCSP responder AAA profile - Under advanced, remove the certificate from "Verify Other" entry and then click Finished - Apply Access Policy - Export Access Policy on the BIG-IP system where the import is made: - Import the previously exported Access Policy - Edit OCSP responder which should now be available - Under advanced, select relevant certificate in "Verify Other" entry and then click Finished

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips