Solved

checked "check for server certificate revocation" problem

Posted on 2009-05-11
3
3,227 Views
Last Modified: 2012-05-06
results in OL-279 error on Quicken download, all accounts. Unchecking gets flawless download. happened suddenly  april 25. Quicken no help.  Had IE vs.7 then.  Now I have Vs 8. No change, can download only after uncheckin , closing and reopening IE.  On closing computer IE resets to checked.  In addition, now i get Windows message" about "revocation  inf not available for this site. Do you want to proceed?" on opening e-mails from credit card companies.  Contacted Symantec, Quicken, my ISP, Citicards tech support.  The latter said it was a system problem on my PC.  HELP
0
Comment
Question by:armgard
  • 2
3 Comments
 
LVL 31

Expert Comment

by:Paranormastic
Comment Utility
Internet options - content tab - clear ssl state.  This usually fixes it - might try clearing temp internet files, history, cookies, etc. if that doesn't work.  If there's a proxy, flush that.

The revocation information (CRL) is normally carried over normal http port 80 so firewall really shouldn't be an issue unless you block a lot of sites or specific words that might happen to get in the way.

You can manually pull up the CRL in a browser by opening up the cert and looking at the details tab and looking for the entry for CRL Distribution Points - highlight that and take any of the URLs that show up in the bottom half of the window that start with http.  If one of them has ocsp in the URL then you can only use that on vista/2008, but there should be another one that isn't for legacy users on xp, etc.
0
 

Accepted Solution

by:
armgard earned 0 total points
Comment Utility
Problem got solved by MS Windows support. They requested a Hijackthis scan and an MSINFO32 scan log transmittal, based on which HijackThis was run again and a number of items were deleted/repaired. Also, IE 8 was reset on the advanced tab of Tools/ Internet Options. After that, the uncheck on "check for server certificate revocation" remained unchecked and the download problem went away. This item is supposed to be unchecked. I had some stuff that insisted on checking it.
0
 
LVL 31

Expert Comment

by:Paranormastic
Comment Utility
Glad its all working for you... however that "check for server certificate revocation" is unchecked is a workaround, not a fix.  You cannot validate that a cert hasn't been revoked - that's not a good thing!  Why use certs at all?
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

I have put this article together as i needed to get all the information that might be available already into one general document that could be referenced once without searching the Internet for the different pieces. I have had a few issues where…
Microsoft has released remote PowerShell capabilities to all commercial Office 365 customers. So you can be controlled via PowerShell and not from the Office 365 admin center Download Windows PowerShell Module for Lync Online http://www.micros…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

7 Experts available now in Live!

Get 1:1 Help Now