CLEANACCESS Archives

January 2010

CLEANACCESS@LISTSERV.MIAMIOH.EDU
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Re: IPSCA Certificate Revocation
From:
Calvin Krzywiec <[log in to unmask]>
Reply To:
Cisco Clean Access Users and Administrators <[log in to unmask]>
Date:
Fri, 29 Jan 2010 11:02:08 -0500
Content-Type:
text/plain
Parts/Attachments:
text/plain (26 lines) 
This sounds like it could be related to Cisco BugID CSCsy37405: "CRL
dialog box coming up and can not go past." We've seen this with our
Entrust certs in both 4.6.x and 4.7.x releases.

We've disabled the CRL check in the agent configuration file
(<AllowCRLChecks>0</AllowCRLChecks>) until Cisco releases a newer
version in which this issue is fixed.

--
Cal A. Krzywiec
Network Engineer
The University of Scranton
Phone: (570) 941-6748
Email: [log in to unmask]



Kyle Torkelson wrote:
> Are any other schools getting the Certificate Revocation error when using IPSCA certificates?  I thought that if I added the CRL distribution point as a host under Traffic Control for all of my User Roles to connect to that that would allow XP, Vista, and Windows 7 to connect to and check.  However, I've had to start doing the "uncheck check for server and publisher cert revocation) as a temporary workaround.
> 
> Any suggestions???
> 
> [cid:image003.jpg@01CA9E96.F6CA5A60]<mailto:[log in to unmask]>
> 
>

ATOM RSS1 RSS2