How can i configure CDP with HTTPS

희승 손 251 Reputation points
2020-11-20T12:05:29.78+00:00

I would like to configure CDP = https://crl.test.com/test.crl
But the warning message says https protocol is not supported.

How to force CDP to https?
If impossible, could you tell reason that it's impossible?

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,480 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,732 questions
0 comments
Accepted answer
  1. Thameur-BOURBITA 32,586 Reputation points
    2020-11-21T13:58:19.537+00:00

    Hi,

    Never use HTTPS protocol for crt or crl file retrieval, because Crypto API will permanently fails to fetch this URL because the client need to validate the certificate used for HTTPS protocol and to validate it the client needs to access to crl

    Please don't forget to mark this reply as answer if it help you to fix your issue

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vadims Podāns 9,111 Reputation points MVP
    2020-11-20T17:18:57.76+00:00

    I would like to configure CDP = https://crl.test.com/test.crl

    I'm pretty sure you don't want that. You MUST NOT serve CDP/AIA/OCSP URLs over HTTPS, use plain HTTP only. Otherwise you will enter into a endless loop while accessing CDP, because SSL certificate must be validated. Many cryptographic libraries will fail URL fetching if it is served over SSL. Leave HTTP as is.

    0 comments