Problem

In B2Bi 2.6 CRL checking for all non-root (not self-signed) certificates is selected by default. When B2Bi cannot find a certificate's CRL, certificate path validation fails. If a CRL is not found, the certificate is considered revoked and the certificate path validation fails.

After upgrade from previous version previously operational certificates may be shown in status failed. New certificates may fail in import. This happens when the CRL URL is inaccessible from b2Bi.

Resolution

You may disable disable mandatory CRL checking if your site restricts access to some CRL's.

1. Select System management on the toolbar to open the System management page.
2. From the list of tasks at the bottom of the page, click Manage CRLs to open the CRLs page.
3. Click Configure CRL usage and retrieval to open the CRL usage and retrieval configuration page.
4. Uncheck Require CRLs.