Bug ID 570563: CRL is not being imported/exported properly

Last Modified: May 14, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 12.0.0, 12.0.0 HF1, 12.0.0 HF2

Fixed In:
12.1.0, 12.0.0 HF3, 11.6.1

Opened: Jan 28, 2016
Severity: 3-Major
Related AskF5 Article:
K35470551

Symptoms

CRL assigned as part of Machine Cert Auth is not being imported/exported properly.

Impact

Prevents CRL from being exported. Might also impact the import/export of Certificate Authority Profiles.

Conditions

This occurs when importing SSL Certificates and Keys using the CRL type. Or when adding the Machine Cert Check agent to import an Access Profile in when creating a New Certificate Authority Profile.

Workaround

1. Copy and install the CRL to the other BIG-IP system separately. 2. Modify the exported configuration to use CRL from step 1

Fix Information

Import and export of CRL is fully supported.

Behavior Change