Bug ID 1294561: When OCSP is disabled, configurations are not accurately shown outside of 'config' mode

Last Modified: Oct 21, 2024

Affected Product(s):
F5OS F5OS-A, F5OS-C(all modules)

Known Affected Versions:
F5OS-C 1.6.0, F5OS-C 1.6.1, F5OS-C 1.6.2

Fixed In:
F5OS-A 1.8.0, F5OS-A 1.7.0

Opened: May 03, 2023

Severity: 3-Major

Symptoms

When the OCSP feature is disabled, making any changes to OCSP configurations (i.e. nonce request, override-responder) are not being updated outside of 'config' mode on the ConfD CLI. When the OCSP feature is enabled, there is no issue.

Impact

No functional impact. User will not be able to see an accurate display of the OCSP configurations while the feature is disabled.

Conditions

Occurs when OCSP is set to 'disabled' and changes are made to the OCSP configurations. Running 'show system aaa authentication ocsp' will display incorrect information.

Workaround

N/A

Fix Information

Starting in F5OS 1.8.0, OCSP configurations are accurately displayed even if the feature is disabled.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips