Forum Discussion

Konstantin_Nach's avatar
Konstantin_Nach
Icon for Nimbostratus rankNimbostratus
Sep 29, 2015

Update of CRL from REST Api

Hello, we are using the REST Api to install certificates and CRLs.

 

For certificate when we run the command again the file is updated but for CRL it gives error: 01020066:3: The requested Certificate Revocation List File (/Common/lb-00000002.crl) already exists in partition Common.

 

Any ideas ?

 

2 Replies

  • For installing CRL we are making post request to /mgmt/tm/sys/crypto/crl with the following JSON {"command":"install","name":"lb-00000002","from-local-file":"/shared/tmp//Certificate Revocation List.crl"}
  • we update the CRL through bash script (tmsh commands) and as far as I remember we also get this error message if there is a change in the CRL. But the CRL gets updated. Have you verified if it's updated/working (although you get the error message)?

     

    CRL handling has always been a pain with BIGIP (and one gets always the answer "use OCSP" from F5 support) :-(

     

    Alex