# Unable to access CRL endpoints

**URL:** <https://discuss.hashicorp.com/t/unable-to-access-crl-endpoints/67137>\
**Category:** Vault\
**Created:** [May 20, 2024, 9:34am UTC](https://discuss.hashicorp.com/t/unable-to-access-crl-endpoints/67137 "2024-05-20T09:34:34Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![ngmathiou](https://sea2.discourse-cdn.com/hashicorp/user_avatar/discuss.hashicorp.com/ngmathiou/32/41737_2.png) [@ngmathiou](https://discuss.hashicorp.com/u/ngmathiou)\
**Post date:** [May 20, 2024, 9:34am UTC](https://discuss.hashicorp.com/t/unable-to-access-crl-endpoints/67137/1 "2024-05-20T09:34:34Z")

</div>

I have initialized Vault v1.16.2 (c6e4c2d4dc3b0d57791881b087c026e2f75a87cb) and created Root CA and and Intermediate CA with CDP:

\*[http://pki.thinkcentre.lan/v1/pki/root/crl](http://pki.thinkcentre.lan/v1/pki/root/crl)  
\*[http://pki.thinkcentre.lan/v1/pki/ica\_tls/crl](http://pki.thinkcentre.lan/v1/pki/ica_tls/crl)

When making a request through the browser I’m unable to acess the CRL with the bellow response:

```json
{
  "errors": [
     "permission denied"
  ]
}

```

Am I missing something in configuration?

**Edit:** Using the auth token I’m able to proceed with the request but still unable to access CRLs.

This time the error I get:

```json
{"errors":["no handler for route \"pki/root/crl\". route entry not found."]}

```

I want to be able to acess the CRL and OCSP without any authorization, were can I find relevant documentation on how I can achive this?