Solved

checked "check for server certificate revocation" problem

Posted on 2009-05-11
3
3,235 Views
Last Modified: 2012-05-06
results in OL-279 error on Quicken download, all accounts. Unchecking gets flawless download. happened suddenly  april 25. Quicken no help.  Had IE vs.7 then.  Now I have Vs 8. No change, can download only after uncheckin , closing and reopening IE.  On closing computer IE resets to checked.  In addition, now i get Windows message" about "revocation  inf not available for this site. Do you want to proceed?" on opening e-mails from credit card companies.  Contacted Symantec, Quicken, my ISP, Citicards tech support.  The latter said it was a system problem on my PC.  HELP
0
Comment
Question by:armgard
  • 2
3 Comments
 
LVL 31

Expert Comment

by:Paranormastic
ID: 24368834
Internet options - content tab - clear ssl state.  This usually fixes it - might try clearing temp internet files, history, cookies, etc. if that doesn't work.  If there's a proxy, flush that.

The revocation information (CRL) is normally carried over normal http port 80 so firewall really shouldn't be an issue unless you block a lot of sites or specific words that might happen to get in the way.

You can manually pull up the CRL in a browser by opening up the cert and looking at the details tab and looking for the entry for CRL Distribution Points - highlight that and take any of the URLs that show up in the bottom half of the window that start with http.  If one of them has ocsp in the URL then you can only use that on vista/2008, but there should be another one that isn't for legacy users on xp, etc.
0
 

Accepted Solution

by:
armgard earned 0 total points
ID: 24427280
Problem got solved by MS Windows support. They requested a Hijackthis scan and an MSINFO32 scan log transmittal, based on which HijackThis was run again and a number of items were deleted/repaired. Also, IE 8 was reset on the advanced tab of Tools/ Internet Options. After that, the uncheck on "check for server certificate revocation" remained unchecked and the download problem went away. This item is supposed to be unchecked. I had some stuff that insisted on checking it.
0
 
LVL 31

Expert Comment

by:Paranormastic
ID: 24436121
Glad its all working for you... however that "check for server certificate revocation" is unchecked is a workaround, not a fix.  You cannot validate that a cert hasn't been revoked - that's not a good thing!  Why use certs at all?
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I have put this article together as i needed to get all the information that might be available already into one general document that could be referenced once without searching the Internet for the different pieces. I have had a few issues where…
This is a fairly complicated script that will install the required prerequisites to install SCCM 2012 R2 on a server.  It was designed under the functional model in order to compartmentalize each step required, reducing the overall complexity.  The …
This Micro Tutorial will give you a basic overview how to record your screen with Microsoft Expression Encoder. This program is still free and open for the public to download. This will be demonstrated using Microsoft Expression Encoder 4.

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question