> Source: [sk169876](https://support.checkpoint.com/results/sk/sk169876)

# sk169876 - No access to certain websites when HTTPS Inspection is enabled

| Property | Value |
|----------|-------|
| Solution ID | sk169876 |
| Date Created | 2020-10-05 |
| Last Modified | 2020-10-08 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |
| Platform | Open Server |

## Symptoms

- * After enabling HTTPS inspection on R80.40, Google, Youtube, Facebook, and other websites may fail.  

* CRL Timeout found in WSTLSD process and `$FWDIR/log/wstlsd.elg` file shows:  

  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 173435104`  
  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: -1557002614`  
  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 651385237`  
  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 170933128`  
  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 539828345`  
  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 539828345`  
  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 539828345`  
  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 673930524`  
  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 0`  
  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 539828345`  
  `
  [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 53982834`

## Cause

A CRL timeout causes slowness in HTTPS Inspection:   

`[wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, `**crl timeout: 173435104**  
`[wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, `**crl timeout: -1557002614**  
`[wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 651385237`  
`...`  
`[wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, `**crl timeout: 0**  
`[wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 156470696`

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content