Is this the right bug vor Switches of N3K family, cause only N9K Switches are mentioned in the affected products? It seems link for N9K and N3K Switches are the same.
Oh i forgot to mention there is a diagnostic logfile where details for CRL Downlaods are available.
You can find it under
Operations > Troubleshoot > Download Logs > Debug logs (right tab) > prrt-server.log
cheers!
Hi Paul,
i've figured out with TAC how the mechanism of CRL checking works:
ISE checks the value of the AKI field in the CRL for ensuring the CRL belongs to a certificate ISE holds in it's trusted certificate store. This field has to contain the ...
..raw. It was released 31-JAN-2017. I don't know what to say.I've installed 2.3 for testing purposes on a seperate vm. Perhaps we can go online with that version in 2020.