VPN Concentrator can't download CRL over HTTP from Microsoft CA



Diogo
07-09-2005, 10:51 PM
Hi,
I have a Microsoft CA running under a Windows 2000 Server Standard SP4. The
CA is installed as a Stand-Alone with the root offline. I'm generating
certificates to be used with Aladdin eToken. First i'm using certificates
just for VPN atuthentication. My company has a Cisco VPN Concentrator 3015. I
already configured the certificate on it and works fine. The problem is that
my Concentrator can't download the CRL. It's using a static point at an
address like this http://ca.server.com.br/crl/server.crl . When I connect
the client to the VPN i look ate the logs and i see that the concentrator
tries to download the CRL but it can't and receive a timeout error. I'm
publishing the CRL on a IIS 5.0 under a Windows 2000 Standard Server. I
already tried to access teh CRL from my browser and i can download it. What
can i do?
Thanks


VPN Concentrator can't download CRL over HTTP from Microsoft CA