General discussion

Locked

CRL distribution points

By Adrian C ·
Given a standalone CA, I want to specify distribution points for the CRL. No matter what I try, it will only publish the CRL to its default location, %systemroot%\system32\CertSrv\CertEnroll.
I thought about a syntax error, but I have no error messages whatsoever. Any ideas? Thanks!

This conversation is currently closed to new comments.

6 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

CRL distribution points

by maxwell edison In reply to CRL distribution points

To specify certificate revocation list distribution points in issued certificates

Log on to the system as an Administrator.

Open Certification Authority

In the console tree, click the certification authority.

Where

Certification Authority (where)

CA name

On the Action menu click Properties.

On the Policy Module tab, click Configure.

On the X.509 Extensions tab, under CRL Distribution Points, specify the distribution points.

----------

To Add a new certificate revocation list (CRL) distribution point.

Add a new certificate revocation list (CRL) distribution point.

----------

The preceding is from a Microsoft article on that subject. See this link for the entire article, more options, and additional related links:

http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/sag_CSprocs_CDP.htm

(REMOVE SPACES from the pasted URL.)

Maxwell

Collapse -

CRL distribution points

by maxwell edison In reply to CRL distribution points

.
.
Possibly helpful links:

http://www.jsiinc.com/SUBH/tip3800/rh3853.htm

http://support.3com.com/infodeli/tools/bridrout/u_guides/html/eos114/family/ref/pki8.htm

Good luck,

Maxwell

Collapse -

CRL distribution points

by Adrian C In reply to CRL distribution points

Thanks for the quick answer, this is what MS says and it doesn't work (the 3com link doesn't work either).
The only thing that seems to do something is using a CAPolicy.inf file, but this implies reinstalling the CA all over again, not much of an usable solution.

Collapse -

CRL distribution points

by Adrian C In reply to CRL distribution points

Point value changed by question poster.

Collapse -

CRL distribution points

by Adrian C In reply to CRL distribution points

"This behaviour is by design".
Actually writting the CRL file anywhere else has to be done by other means.

Collapse -

CRL distribution points

by Adrian C In reply to CRL distribution points

This question was closed by the author

Back to Security Forum
6 total posts (Page 1 of 1)  

Related Discussions

Related Forums