Bug ID 570563: CRL is not being imported/exported properly

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.6.0, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.1.0, 12.0.0 HF3, 11.6.1

Opened: Jan 28, 2016

Severity: 3-Major

Related Article: K35470551

Symptoms

CRL assigned as part of Machine Cert Auth is not being imported/exported properly.

Impact

Prevents CRL from being exported. Might also impact the import/export of Certificate Authority Profiles.

Conditions

This occurs when importing SSL Certificates and Keys using the CRL type. Or when adding the Machine Cert Check agent to import an Access Profile in when creating a New Certificate Authority Profile.

Workaround

1. Copy and install the CRL to the other BIG-IP system separately. 2. Modify the exported configuration to use CRL from step 1

Fix Information

Import and export of CRL is fully supported.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips