In a non-DNS environment, the CRL check does not work if CDP URL is not accessible
The CRL check does not work if the CDP URL is not accessible in a non-DNS environment. (4063696)
Workaround:
If CRL is enabled, use one of the following options based on your configuration:
Using CDP
If ECA_CRL_PATH is not specified, NetBackup uses the CRLs from CRL distribution point (CDP) of the peer host's certificate. Ensure that the URLs that are available in the CDP are accessible and are added in the
/etc/hostfile.Using existing downloaded CRLs
If you have downloaded all the CRLs for all the required certificates in the trust chain (based on the ECA_CRL_CHECK setting), mention the CRL directory in the ECA_CRL_PATH in the NetBackup configuration file.
Else, you can also disable CRL by adding ECA_CRL_CHECK= DISABLE entry in bp.conf/registry.