Certificate CRL issue: http URL without trailing slash is not supported

gowa · Sat Jun 02, 2018 6:20 pm

Hi. Having problem with the intermediate certificate from letsencrypt: https://letsencrypt.org/certs/letsencry ... x3.pem.txt
It's CRL http url does not have a trailing slash. RouterOS refuses to load information from such URL. Moreover, Webfig claims that URLs without a trailing slash are not valid.
Compare dynamic CRL and manual. Manual works OK.

certificate_error_2.PNG

For dynamic CRL logs show:

Jun/02/2018 17:59:55 certificate,debug flush CRLs
Jun/02/2018 17:59:55 certificate,debug start CRL update
Jun/02/2018 17:59:55 certificate,debug bad CRL URL: http://crl.root-x1.letsencrypt.org
Jun/02/2018 17:59:55 certificate,debug CRL fetch failed:

Certificate CRL issue: http URL without trailing slash is not supported

Certificate CRL issue: http URL without trailing slash is not supported

Who is online