How can i configure CDP with HTTPS

희승 손 251 Reputation points
2020-11-20T12:05:29.78+00:00

I would like to configure CDP = https://crl.test.com/test.crl
But the warning message says https protocol is not supported.

How to force CDP to https?
If impossible, could you tell reason that it's impossible?

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,788 questions
Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,850 questions
0 comments No comments
{count} votes

Accepted answer
  1. Thameur-BOURBITA 33,006 Reputation points
    2020-11-21T13:58:19.537+00:00

    Hi,

    Never use HTTPS protocol for crt or crl file retrieval, because Crypto API will permanently fails to fetch this URL because the client need to validate the certificate used for HTTPS protocol and to validate it the client needs to access to crl

    Please don't forget to mark this reply as answer if it help you to fix your issue

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Vadims Podāns 9,121 Reputation points MVP
    2020-11-20T17:18:57.76+00:00

    I would like to configure CDP = https://crl.test.com/test.crl

    I'm pretty sure you don't want that. You MUST NOT serve CDP/AIA/OCSP URLs over HTTPS, use plain HTTP only. Otherwise you will enter into a endless loop while accessing CDP, because SSL certificate must be validated. Many cryptographic libraries will fail URL fetching if it is served over SSL. Leave HTTP as is.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.