topic Re: CRL Distribution Point (CDP) Config in General Topics

CRL Distribution Point (CDP) Config

JaysonHaxton — Tue, 01 Nov 2022 16:09:30 GMT

Is there a place in the PAN-OS to configure the CDP address or does it only learn it from the certificate? We have a new CDP we are testing and have added it's IP to our cert but the firewall is not attempting to contact it, only the second one. Is there a way to force it to connect to the new CDP?

Re: CRL Distribution Point (CDP) Config

BPry — Tue, 01 Nov 2022 17:35:55 GMT

@JaysonHaxton,

This is only learned from the certificate, you can't actually override it like you can with OCSP in the certificate profile.

Re: CRL Distribution Point (CDP) Config

JaysonHaxton — Tue, 01 Nov 2022 18:46:18 GMT

Is there a reason that it's only attempting to only contact the 2nd CDP listed in the cert and not the first one? In the system logs it only shows it contacting the second CDP.