topic Re: CRL with no internet in General Topics

CRL with no internet

AndrewPowersCTS — Sun, 07 May 2023 16:10:49 GMT

Hello,

I have a 440 with no internet access. I could not find documentation on the proper way to update the CRL when my firewall does have access to the internet. Thanks for any help that I might be able to get with this.

Re: CRL with no internet

reaper — Mon, 08 May 2023 08:50:52 GMT

For PKI certificates that have a CRL/OCSP host located on the internet, in case your management interface is oob and cannot access the internet, you may want to create a service route ( Device > Setup > Services > Service Route Configuration) so outbound connections to these hosts are performed using a dataplane interface instead of the management interface

Re: CRL with no internet

AndrewPowersCTS — Wed, 10 May 2023 12:40:50 GMT

Thank you for the reply. What if my Certs are hosted internally? Would the solution still be the same but create an inbound route? I found a solution that uses OpenSSL to merges the cert and the CRL. Have you had any experience with this solution?

Thank you for the reply.