Link to home
Start Free TrialLog in
Avatar of ddstyles
ddstyles

asked on

CRL Certificate Revocation

Hi,

We run Oracle ias, in particular  Apache web server.  We use Verisign Certificates for login screens, and some of our users complain about the CRL revocation List error message - see https://www.experts-exchange.com/questions/21426751/Security-certificate-revocation-question-pops-up-even-though-no-changes-made-in-MSIE.html.  
How can i check out the CRL and check if our certificate is included in the CRL, and if incorrect or not there, how can we add it?

many thanks,  Duncan
Avatar of ddstyles
ddstyles

ASKER

I think I found a link:  http://crl.verisign.com/  I'm having a look here.  
Further investigation shows the browser stores the revocation lists, and updates automatically.  Browsers getting the revocation error must be prevented from accessing the crl sites (i.e. proxy settings) or the crls are not enabled in the browser.  I'm using firefox, and the settings are found in edit preferences, advanced, encryption, revocation lists.    I hope this helps others.  
ASKER CERTIFIED SOLUTION
Avatar of EE_AutoDeleter
EE_AutoDeleter

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial