|
Posted by Brian Komar [MVP] on September 16, 2005, 2:05 pm
Please log in for more thread options Vsevolod@discussions.microsoft.com says...
> Hello, Brian !
>
> "Brian Komar [MVP]" wrote:
> >
> > What you will need to do is ensure that all certificates (other than the
> > root CA) have the AIA and CDP extensions in the issued certificates.
> >
> As I wrote before I had made simple test. I installed two Microsoft CA
> Server ( Root & Suburdinate ) with default settings. Then I issued WEB sever
> certificate by Root CA and client certificate by Subordinate CA. When I try
> open page on IIS 6 I receive the error:
> 403.16. <ALL> issed certificates have AIA and CDP extensions. All resources
> where AIA and CDP extensions point are available.
>
> IMHO I think you can make the same test with the same result.
>
>
> Thanks for your attention to my person.
> BR,
> Vsevolod.
>
>
Run two tests for me:
At the client, run certutil -verify -urlfetch <certfile>
against the Web server certificate as the certfile.
Do the same test at the Web server against the client certificate as the
certfile.
Post the output. You may have to load the 2k3 Adminpak at both the IIS
6.0 server and at the XP client to run the command. My bet is that,
because you used the default configuration, there are issues with the
AIA and CDP extensions.
Brian
| 
XML Sitemap