Why is my certificate not being validated?
I have a certificate server on a network with three certification paths
that come before it, so when I view the Certification Path of my
certificate in MMC, I see two certificates above it. Originally,
validating this certificate did not work because there was an error with
revocation during my custom validator using the X509Chain.Build() method.
So, since I realized my generated certificate did not contain any CRL
distribution points, I made the certificate server generate them, so now
using the checkbox, "Include in the CDP extension of issued certificates"
in my certificate server, the certificate server generates an HTTP CRL
distribution point for this certificate and I see it. I can even access
the URL it contains and download the CRL file. The problem now, is that
while I try validating this certificate in my service application running
under the local system account, I get the following error in the
X509Chain.ChainStatus list after issuing an X509Chain build:
Status: OfflineRevocation
StatusInformation: The revocation function was unable to check revocation
because the revocation server was offline.
Using a console application running under my administrator account, I get
the following error:
Status: RevocationStatusUnknown
StatusInformation: The revocation function was unable to check revocation
for the certificate.
Does anyone have some ideas on what I can try next to get revocation to
work for my certificate so that I can actually validate it? I don't seem
to have any issues pinging my certificate server, either.
No comments:
Post a Comment