Bug ID 758781: iControl SOAP get_certificate_list commands take a long time to complete when there are a large number of certificates

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 15.0.0, 15.0.1

Fixed In:
15.1.0, 15.0.1.1, 14.1.2.3, 13.1.3.2

Opened: Feb 14, 2019

Severity: 3-Major

Symptoms

The following commands take a long time to complete when there are a large number of certificates: get_certificate_list() get_certificate_list_v2() get_certificate_list_v3()

Impact

Slowness might cause timeouts in applications that are calling these functions.

Conditions

-- Using the get_certificate_list(), get_certificate_list_v2(), and get_certificate_list_v3() commands to get certificate information. -- A large number of certificates (typically in the thousands) are installed on the BIG-IP system.

Workaround

Use iControl REST API corresponding to sys/file/ssl-cert.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips