Re: Problem publishing crl on EntCA

From: David Beaven (technet_at_ids.ac.uk)
Date: 07/23/04

  • Next message: Bob Qin [MSFT]: "RE: Problem publishing crl on EntCA"
    Date: Fri, 23 Jul 2004 13:08:37 +0100
    
    

    Solved it. Deleted publication of crl to local drive. Readded the same
    line (cut and pasted syntax) and started working again!
    Weird - minor bug?

    "David Beaven" <technet@ids.ac.uk> wrote in message
    news:#YJrDlAcEHA.3580@TK2MSFTNGP11.phx.gbl...
    > Have an offline root CA and have created an online enterprise CA.
    Verified
    > certificate chain ok and crl and aia for root are available in htpp and ad
    > locations. e.g pkihealth snapin says ok for rootCA.
    > Configured enterprise ca extensions for crl and aia. When I attempt to
    > publish crl 'certutil -crl' I get: CRL command failed: 0x800700a1
    > (WIN32/HTTP: 161), the specified path is invalid. I have tried removing
    all
    > extensions paths except local file system - but still same error (I assume
    > that it publishes crls to the locations specified in extensions tab?!).
    > Any ideas please?
    > Thanks
    > David
    >
    >


  • Next message: Bob Qin [MSFT]: "RE: Problem publishing crl on EntCA"

    Relevant Pages

    • Problem publishing crl on EntCA
      ... Have an offline root CA and have created an online enterprise CA. Verified ... Configured enterprise ca extensions for crl and aia. ...
      (microsoft.public.windows.server.security)
    • Re: Problem publishing crl on EntCA
      ... Could you let us know the exact command you are ... like to know more about how you delete the publication of crl to local ... Microsoft Partner Support ... |> that it publishes crls to the locations specified in extensions tab?!). ...
      (microsoft.public.windows.server.security)
    • Questions about new PKI infrastructure
      ... I'm about to implement a PKI infrastructure in my company, ... Certificate key length: 4.096 bits ... CRL and AIA publication order: ...
      (microsoft.public.windows.server.general)
    • RE: Questions about new PKI infrastructure
      ... Root CA: ... Certificate key length: 4.096 bits ... CRL and AIA publication order: ...
      (microsoft.public.windows.server.general)
    • RE: Questions about new PKI infrastructure
      ... What should and should not be specified in the CAPolicy.inf for the root ... Do I only have to worry about CDP, AIA, key length and ... should I use 77 or 79 as the CRL publishing option? ...
      (microsoft.public.windows.server.general)