I am trying to configure a CRL on a vpx pair running 14.1 25.56. Getting "Invalid CRL". The same CRL is configured and doing auto refresh on another test pair in the same environment (same fw version). I can also download and configure the same URL on my own lab NS without an issue. Cant see anything in the ns.log that seems relevant. Same issue if i choose PEM or DER. Is there logging somewhere else for CRL function or has anybody else come across this?

if you create a probe (add a tm/lb service with a monitor), does that one work?

Its a crl file it i am trying to install. Not sure what i would point it at?

I mean, I understood you're trying to configure an URL for the CRL like "http://crl.company.com/crl" and it fails? Configuring a service object to access that URL could help you to understand if the requested URL is reachable from the NetScaler. There might be routing issues or a firewall blocking the access.

Ah ok, the thing is it fails even before I tick the box to configure the "auto refresh" piece. So I have already downloaded the CRL and I am just trying to install it.