Bug ID 514742: OCSP Responder URL is case sensitive, scheme part is required

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6

Fixed In:
13.0.0

Opened: Mar 27, 2015

Severity: 4-Minor

Symptoms

OCSP Responder fails to initialize if scheme is not specified ("myhost.org" instead of "http://myhost.org") OR scheme is not lowercase ("myHost.org" instead of "http://myhost.org")

Impact

OCSP responder failed to initialize - OCSP authentication fails

Conditions

URL field doesn't contain scheme part (http/https) or scheme part is not all lowercase

Workaround

configure URL starting with http:// or https://

Fix Information

apm will lowercase scheme part of the specified URL if it's http or https. apm will throw configuration error if scheme is not specified for the URL or wrong scheme provided (anything other than http/https)

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips