Bug ID 1040005: CA Bundle manager update interval is not honored

Last Modified: Jan 20, 2023

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 16.1.0, 16.1.1, 16.1.2, 16.1.2.1, 16.1.2.2, 16.1.3, 16.1.3.1, 16.1.3.2, 16.1.3.3

Opened: Aug 11, 2021
Severity: 4-Minor

Symptoms

CA bundle manager may try to update and install CA-bundles more frequently than the configured interval. For example, if "Update Interval" is configured as 1 day, ca bundle manager may try to update and install CA-bundles every 12 hours. If "Update Interval" is configured as 2 days, ca bundle manager may try to update and install CA-bundles every 36 hours.

Impact

CA bundle manager request toward "Include URLs" (default "https://cdn.f5.com/product/ca-bundle/blended-bundle.crt") occurs more often than configured interval.

Conditions

Under GUI [System] >> [Certificate Management] : [Traffic Certificate Management] : [Bundle Manager List] >> "NAME", configure "Update Interval" other than default "0 (days)".

Workaround

None.

Fix Information

None

Behavior Change