PKI/4/HTTP_AUTO_GET_CRL_ERR

Message

PKI/4/HTTP_AUTO_GET_CRL_ERR: Realm [realm_name] failed to obtain CRL through HTTP (Reason=[reason]).

Description

Failed to obtain the CRL using HTTP.

Parameters

Parameter Name	Parameter Meaning
realm_name	Specifies the name of a PKI realm.
reason	Indicates the failure cause.

Possible Causes

URL resolution failed: URL parsing failed.
Failed to connect to the server: Connecting to the server failed.
The server did not respond within the specified period: Failed to receive the response from the server within the specified period.
Failed to receive the response message: Failed to process the response received from the server.
Failed to save the response message: Failed to save the response received from the server.

The file has been imported or referenced for several times: The CRL file has been imported or referenced for several times.

Procedure

Cause 1: URL resolution failed.
When downloading the CRL using the pki get-crl command, run the display pki realm command to check whether the URL meets requirements.
- If not, run the cdp-url command in the PKI realm view to change the URL.
- If so, collect required information and contact technical support personnel.
Cause 2: Failed to connect to the server.
Run the ping command to check whether the link between the device and server is reachable.
- If not, ensure that the network configurations, including interfaces and IP addresses, are correct.
- If so, collect required information and contact technical support personnel.
Cause 3: The server did not respond within the specified period.
Check whether the server is working properly.
- If not, ensure that the server has the CRL service enabled and is working properly.
- If so, collect required information and contact technical support personnel.
Cause 4: Failed to receive the response message.
Check whether the CRL file of the server exists.
- If not, add the CRL file to ensure that the server can provide the CRL download function.
- If so, collect required information and contact technical support personnel.
Cause 5: Failed to save the response message.
Run the dir command in the user view to check whether the storage space of the device is full.
- If so, run the delete command in the user view to delete unnecessary files.
- If not, collect required information and contact technical support personnel.
Cause 6: The file has been imported or referenced for several times.
If the CRL file is being used by multiple PKI realms, the CRL file cannot be updated. To ensure that the CRL file can be updated automatically, ensure that the file is being used by only one PKI realm.