Security

 View Only

  • 1.  CRL access options - Can ClearPass access CRL via LDAP?

    Posted Apr 03, 2025 12:54 AM

    I have Microsoft PKI certs used for EAP-TLS. In the cert it lists URL's for CRL distribution via ldap and http as well as ocsp via http. My question is for ClearPass, does it support pulling the CRL list via an ldap lookup? i.e. from the certs URL of URL=ldap:///CN=etc.etc.ect.



  • 2.  RE: CRL access options - Can ClearPass access CRL via LDAP?
    Best Answer

    Posted Apr 03, 2025 09:25 AM

    I don't think ClearPass even looks at that attribute.  You need to add the CRL manually: https://arubanetworking.hpe.com/techdocs/ClearPass/6.12/PolicyManager/Content/CPPM_UserGuide/Admin/CertificateRevocationListHelp.html


    Original Message


  • 3.  RE: CRL access options - Can ClearPass access CRL via LDAP?

    Posted Apr 03, 2025 04:24 PM

    Thanks, we aim to use OCSP with CRL fallback. Was thinking that an LDAP option would have some advantages.


    Original Message


Related Content