DCDT Discovery Tests are failing due to unavailable certificate revocation server.

[joseph...@surescripts.com]

CRL Distribution Points from D1_valA certificate:

[1]CRL Distribution Point
     Distribution Point Name:
          Full Name:
               URL=http://pki.dcdt31.healthit.gov:10080/dcdt31.healthit.gov_ca_root.crl

Thank you,

Joe Shook

Enterprise Architect, Surescripts

[Sandeep Savarala]

Will rectify this soon and get back to you.

--
You received this message because you are subscribed to the Google Groups "Edge Test Tool (ETT)" group.
To unsubscribe from this group and stop receiving emails from it, send an email to edge-test-too...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/edge-test-tool/a4f222ac-3d61-4116-b3d8-563315cd60c7n%40googlegroups.com.

[Sandeep Savarala]

Can you try now? Also, make sure you re-register your contact email as the backend service was updated.

[joseph...@surescripts.com]

Still cannot reach   http://pki.dcdt31.healthit.gov:10080/dcdt31.healthit.gov_ca_root.crl

I am only concerned with the Discovery Tests.  Meaning my code as a client.  So not concerned with the email registration, but good to know.  I have some tests identical to the ones in the c# RI.  They run on a regular basis and this is what alerted me to the unavailble certificate revocation server.  

[joseph...@surescripts.com]

OK, now I see something else that must have changed.  It appears that D1_valA chains up to a different anchor than the one downloaded from.  Oh, wait.  LOL.  I downloaded the anchor earlier today to validated it was the same one I had in my test harness.  And it was the same.  But after I logged in, rather than anonymously accessing the site, I do receive the correct anchor.  Let me retest. 

[joseph...@surescripts.com]

FYI, it all looks good.  Nothing more than a stale anchor on my side.   I was also using my browser to look for the CRL endpoint which doesn't work as expected anymore.   Postman or Curl is you friend.  

Thank you for you resonse Sandeep.  I am not sure there was every anything a miss after all.

[Sandeep Savarala]

Glad it’s all good.

On May 17, 2022, at 3:05 PM, joseph...@surescripts.com <joseph...@surescripts.com> wrote:

FYI, it all looks good.  Nothing more than a stale anchor on my side.   I was also using my browser to look for the CRL endpoint which doesn't work as expected anymore.   Postman or Curl is you friend.  

To view this discussion on the web visit https://groups.google.com/d/msgid/edge-test-tool/c26bba77-4c4b-495f-8d7b-ef5d87a20079n%40googlegroups.com.