Loading...
Loading...
HOST header not sent in OCSP responder request. APM OCSP responder object uses HTTP/1.0 to send a request to the OCSP responder and HTTP/1.0 does not have a host header.
APM receives an invalid response because the OCSP Server didn't know which site to send the request to due to no HOST header.
OCSP configuration
Create a layer virtual server listening on the IP of the ocsp server and having an irule insert the host header. ltm rule ocsp_insert_http_host { when HTTP_REQUEST { HTTP::header insert Host <e.g. IP address> } }
HOST header added in OCSP responder request for HTTP/1.1.
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.