What is the best way to check certificate against CRL, by code.
Should it be directly from the CA site ( CRL Distribution Point http://icd6.ica.co.il/oca02.crl ),
or should I download the crl to the web server hard disk???
Re: Stand Alone CA Problem ... Unless the CRL is valid for a very long time (which is normally a bad ...download is usually many times faster. ... > and imported it in my certificate store.... In the Edit Trust... (microsoft.public.win2000.security)
RE: Update Certificate Revocation List (CRL) in IIS using .Net ... If CRL checking is on, ... each client certificate against the downloaded CA CRL to see if it's been ... If the CRL is too old, IIS will automatically go out to the CA ... and download a new one, without requiring any intervention from you. ... (microsoft.public.inetserver.iis.security)