Hi.
I’m running two CCR1016-12S with identical config (one primary, the other one as a backup).
The primary CCR is a OpenVPN server with self signed certs. If the primary fails, the backup MT should take over the OpenVPN server role as well. I, exported all the certificates from primary CCR with private keys and imported them to backup CCR. But the VPN works only if i disable CRL:
/certificate settings
set crl-download=no crl-use=no
When I open properties on CA, the "CA CRL Host"is empty, but on the primary CCR the “CA CRL Host” is the ip I put in when generating the CA.
Any ideas? Thx!