|
Posted by Brian Komar [MVP] on October 5, 2005, 7:16 am
Please log in for more thread options
show/hide quoted text
<ondra at my_surname dot com> says...
> Hello,
>
> I have tried it, but the certificates.MMC snap-in does not check for
> revocation information nor for the fact the root CA certificate have to be
> in "trusted root"s.
>
> how to make the snap-in do the work or is there a simple utility that would
> provide me with exact error codes for the certification validity checks?
>
> O.
>
>
>
The MMC consoles do not invoke the calls to check revocation on a
certificate. This is left up to the application that is validating the
certificate.
The easiest way is to use a computer running Windows XP or Windows
Server 2003 with the Administration Pack installed. You can then run:
show/hide quoted text
certutil -verify -urlfetch <certificateFile.cer>
Just export the certificate from the MMC to a base64 or der format file.
Brian
|
> Hello,
>
> I have tried it, but the certificates.MMC snap-in does not check for
> revocation information nor for the fact the root CA certificate have to be
> in "trusted root"s.
>
> how to make the snap-in do the work or is there a simple utility that would
> provide me with exact error codes for the certification validity checks?
>
> O.
>
>
>