Re: CertGetCertificateChain() vs CertVerifyRevocation()

From: prem (anonymous_at_discussions.microsoft.com)
Date: 05/28/04 

Date: Fri, 28 May 2004 03:06:06 -0700

Yes I am getting new CRL, I checked it by cleaning the Temporary Internet File folder and executed the program. I got a new CRL in the Temporary Internet File folder.

Now, if I try to run the same code in a loop i.e., trying CertGetCertificateChain() in a loop, I do not get the certificate as revoked. I tried stopping the program and started it, now I got the certificate as revoked.

I was told that there the CRL gets chached in the proces memory and I need to unload and load the crypt32.dll. But unfortunatley that idea does not suit to my application.

Is there any way to detect the real status of the certificate without restarting the program ?

Thanks,
Prem

Relevant Pages

  • Re: Thawte Digital Certificate Revocation List Issue
    ... > I am new to digital certificates and cannot get the Thawte certificate ... It's been awhile since I played with the Thawte certificates. ... Microsoft requires the cert ... CRL so Outlook doesn't know where to get ...
    (microsoft.public.security)
  • Re: Newbie wants to learn about PKI Server 2003......
    ... 2003 PKI Certificate Security", and have been lurking here for a bit. ... We will implement a 2 tier heirarchy, with the Root CA being offline. ... All clients that attempt revocation checking will first attempt to retrieve the CRL from the ... level below a self-signed cert, so applications that are 3280 compliant would never check the ...
    (microsoft.public.windows.server.security)
  • Help PKI installation - lots of questions !
    ... One STAND ALONE ROOT CA called SACAMX00 (SA stand for Stand Alone, ... AMERICAS Sub & CA ASIA Sub ... Client use this to find Delta CRL ... publish my CRL again even if no certificate are revoked? ...
    (microsoft.public.security)
  • Re: Help PKI installation - lots of questions !
    ... One STAND ALONE ROOT CA called SACAMX00 (SA stand for Stand Alone, ... AMERICAS Sub & CA ASIA Sub ... Client use this to find Delta CRL ... publish my CRL again even if no certificate are revoked? ...
    (microsoft.public.security)
  • Re: revoking ipsec certificate doesnt work
    ... It's possible to publish manually the update delta and full CRL using the CA ... MMC SnapIn on the Server. ... my test VPN client never checks if the ... Server 2003 SP1 without any problem after the certificate is revoked nearly ...
    (microsoft.public.windows.server.security)