Follow

Unable to register Venafi Agent due to a delta CRL download error

Applies:

Trust Protection Platform 14.2 and above

Symptom:

The following error is seen when attempting to register an agent.

Debug:vagent_1850 Venafi Agent Library: Downloading CRL from: http://win-d4vvmul
1pnt.jmeldrum.local/CertEnroll/jmeldrum-CA.crl
Debug:vagent_1851 Venafi Agent Library: Convert CRL to PEM: C:\Program Files\Ven
afi\Agent\Data\ssl\certs\base-2877793198.crl
Debug:vagent_1850 Venafi Agent Library: Downloading CRL from: http://win-d4vvmul
1pnt.jmeldrum.local/CertEnroll/jmeldrum-CA+.crl
Warning:vagent_1857 Venafi Agent Library: SSL CRL, download failed from: http://
win-d4vvmul1pnt.jmeldrum.local/CertEnroll/jmeldrum-CA+.crl result: 404  error: N
o error
Error:vagent_1702 Venafi Agent Library: Transport error: server "https://jmeldru
m.venafi.com/vedclient/authorize/sessionrequirements" error: "curl: (60) SSL cer
tificate problem, verify that the CA cert is OK.\|‼Ç☺

 

When attempting to access the CRL url listed above, the following error is displayed:

HTTP Error 404.11 - Not Found
The request filtering module is configured to deny a request that contains a double escape sequence.

CRL_404_Error.png

 

Cause:

The problem is that the REQUEST FILTERING MODULE is configured to deny a request that contains a plus character which is found in the delta crl name.

Do the following on the application site to resolve the issue:

Request_Filtering.png

 

Edit_Feature_Settings.png

Was this article helpful?
1 out of 1 found this helpful

Comments