The upper limit of pkix.crl.maxSize

Products

• CA API Gateway
• API SECURITY
• STARTER PACK-7
• CA Microgateway

Issue/Introduction

In the Gateway log, the following warning message was recorded.

WARNING com.l7tech.util.ConfigFactory$DefaultConfig: Configuration property pkixCRL.maxSize value '4194304000' is invalid; using default value '1,048,576' instead.

What value is the upper limit of pkix.crl.maxSize?

Environment

Release : 9.0

Component : API GATEWAY

Resolution

The value 4194304000 is exceeding the Java integer range -2,147,483,648 to +2,147,483,647. The warning message reported the value in this cluster-wide property exceeded the integer range. The size of CRL won't be so huge. Please consult with the Certificate Authority about the expected size of CRL and set an appropriate value to the Cluster-Wide property.