04-19-2017 12:06 AM
Currently we have some issues with our PKI, and i would like to understand the behaviorof Clearpass.
We check every hour the CRL. The CRL has a lifetime of 24 hour. Now we receive the error "Updating CRLs failed". Is Clearpass using the CRL untill the end of the lifetime? And what happens if CRL lifetime exceeds? Is traffic continue working (but cann't guaranteed), or will Clearpass block the authentications because it can't validate it?
Thanks in advance for your reply.