Using a CRL

[Martin Sherred]

I have downloaded the CRL from a private CA, saved the
file to disk and then installed the CRL. I selected the
option to have the process automatically select the store
for the CRL.

I can view the CRL, it contains data concerning a revoked
certificate for an internal website. From what I have
pieced together this should be sufficient to prevent this
particular client from making a secure (https) connection
to the web server whose revoked certificate is indicated
in the CRL. But, I am still able to establish an SSL
connection to the web server??? Not sure where I have
gone wrong here. Any suggestions would be appreciated.

[David Cross [MS]]

There could be several factors coming into play here:

1. Did you turn revocation on in IE?

2. Are you sure the CRL is installed locally?

3. Are you sure the web server cert is revoked and on the CRL?

4. Are you sure there is no CRL previously issued and cached?

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn
ol/WinXPPro/support/tshtcrl.asp

--

David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

"Martin Sherred" <mshe...@comcast.net> wrote in message
news:019801c2fe75$b82ed1a0$3401...@phx.gbl...

[Martin Sherred]

>.Thanks for your comments. In fact "Check for server
certificate revocation" in IE had not been enabled. Odd
that it is not enabled by default.
>

[David Cross [MS]]

It is enabled by default in Windows Server 2003 and all future versions of
the operating system

--

David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

"Martin Sherred" <mshe...@comcast.net> wrote in message

news:04bb01c2febf$80834390$3401...@phx.gbl...