Link to home
Start Free TrialLog in
Avatar of armgard
armgard

asked on

checked "check for server certificate revocation" problem

results in OL-279 error on Quicken download, all accounts. Unchecking gets flawless download. happened suddenly  april 25. Quicken no help.  Had IE vs.7 then.  Now I have Vs 8. No change, can download only after uncheckin , closing and reopening IE.  On closing computer IE resets to checked.  In addition, now i get Windows message" about "revocation  inf not available for this site. Do you want to proceed?" on opening e-mails from credit card companies.  Contacted Symantec, Quicken, my ISP, Citicards tech support.  The latter said it was a system problem on my PC.  HELP
Avatar of Paranormastic
Paranormastic
Flag of United States of America image

Internet options - content tab - clear ssl state.  This usually fixes it - might try clearing temp internet files, history, cookies, etc. if that doesn't work.  If there's a proxy, flush that.

The revocation information (CRL) is normally carried over normal http port 80 so firewall really shouldn't be an issue unless you block a lot of sites or specific words that might happen to get in the way.

You can manually pull up the CRL in a browser by opening up the cert and looking at the details tab and looking for the entry for CRL Distribution Points - highlight that and take any of the URLs that show up in the bottom half of the window that start with http.  If one of them has ocsp in the URL then you can only use that on vista/2008, but there should be another one that isn't for legacy users on xp, etc.
ASKER CERTIFIED SOLUTION
Avatar of armgard
armgard

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Glad its all working for you... however that "check for server certificate revocation" is unchecked is a workaround, not a fix.  You cannot validate that a cert hasn't been revoked - that's not a good thing!  Why use certs at all?