• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 3252
  • Last Modified:

checked "check for server certificate revocation" problem

results in OL-279 error on Quicken download, all accounts. Unchecking gets flawless download. happened suddenly  april 25. Quicken no help.  Had IE vs.7 then.  Now I have Vs 8. No change, can download only after uncheckin , closing and reopening IE.  On closing computer IE resets to checked.  In addition, now i get Windows message" about "revocation  inf not available for this site. Do you want to proceed?" on opening e-mails from credit card companies.  Contacted Symantec, Quicken, my ISP, Citicards tech support.  The latter said it was a system problem on my PC.  HELP
0
armgard
Asked:
armgard
  • 2
1 Solution
 
ParanormasticCryptographic EngineerCommented:
Internet options - content tab - clear ssl state.  This usually fixes it - might try clearing temp internet files, history, cookies, etc. if that doesn't work.  If there's a proxy, flush that.

The revocation information (CRL) is normally carried over normal http port 80 so firewall really shouldn't be an issue unless you block a lot of sites or specific words that might happen to get in the way.

You can manually pull up the CRL in a browser by opening up the cert and looking at the details tab and looking for the entry for CRL Distribution Points - highlight that and take any of the URLs that show up in the bottom half of the window that start with http.  If one of them has ocsp in the URL then you can only use that on vista/2008, but there should be another one that isn't for legacy users on xp, etc.
0
 
armgardAuthor Commented:
Problem got solved by MS Windows support. They requested a Hijackthis scan and an MSINFO32 scan log transmittal, based on which HijackThis was run again and a number of items were deleted/repaired. Also, IE 8 was reset on the advanced tab of Tools/ Internet Options. After that, the uncheck on "check for server certificate revocation" remained unchecked and the download problem went away. This item is supposed to be unchecked. I had some stuff that insisted on checking it.
0
 
ParanormasticCryptographic EngineerCommented:
Glad its all working for you... however that "check for server certificate revocation" is unchecked is a workaround, not a fix.  You cannot validate that a cert hasn't been revoked - that's not a good thing!  Why use certs at all?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Ruby Fundamentals

This course will introduce you to Ruby, as well as teach you about classes, methods, variables, data structures, loops, enumerable methods, and finishing touches.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now