OPERATIONAL DEFECT DATABASE
...
...
A certificate validation fails when CRL is not available even though it should fall back to none.
The issue was found in IOS-XE 16.6.4. Revocation check configured to use CRL and fall back to "none" if needed: "revocation-check crl none". CRL cannot be verified (CDP URL was not reachable in the investigated case).
Configure "revocation-check none". Make sure CRL can be verified successfully.
The issue may affect other software releases.
Cisco Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.
