I have probleem with download CRL(Certificate revocation lists) with my UAC
I am useing option "manually configured CDP" with CDP URL
I can download CRL file use this URL from my browser. so there is nothing wrong with my URL
I see this error in log
Error downloading CRL from 'http://*******%20root%20certificate.crl': CRL verification error
|Current version:||4.3R3 (build 20777)|
can anyone help me please
Can you try CDP URL with Ip address instead of hostname, Also can you install root, device and server certificates from CA.
first of all thanks for reply
I have try it with Ip address instead of hostname But still same error "verification error"
I can instala certificates from CA. because If i go to CDP URL via browers then i can download CRL
Please install root, device and server certificates from CA on the infranet controller trusted CA server list.
Also can you try pinging the CDP URL hostname from IC device. You can do this by navigating to below section of IC GUI
Also try pinging the CDP ip instead of hostanem if ping is failing for hostname.
If both Ip & hostname pings are failing , it will be CDP reachability issue
both Ip & hostname is pingable.
what do you mean by root, device and server certificates from CA?
I have only install our root certificate to "trusted CA server list" and "Trusted Client CAs list"
Sorry if i asked supid qustions i am not expert in certificate.
Are you using any proxy to connect through this HTTP URL, I suspect this as the issue.
Can you try with LDAP cdp URL instead of http URl, hope this helps