How can i configure CDP with HTTPS

희승 손 251 Reputation points
2020-11-20T12:05:29.78+00:00

I would like to configure CDP = https://crl.test.com/test.crl
But the warning message says https protocol is not supported.

How to force CDP to https?
If impossible, could you tell reason that it's impossible?

Windows for business Windows Server User experience Other
Windows for business Windows Server Devices and deployment Configure application groups
0 comments No comments
{count} votes

Accepted answer
  1. Thameur-BOURBITA 36,261 Reputation points Moderator
    2020-11-21T13:58:19.537+00:00

    Hi,

    Never use HTTPS protocol for crt or crl file retrieval, because Crypto API will permanently fails to fetch this URL because the client need to validate the certificate used for HTTPS protocol and to validate it the client needs to access to crl

    Please don't forget to mark this reply as answer if it help you to fix your issue

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Vadims Podāns 9,186 Reputation points MVP
    2020-11-20T17:18:57.76+00:00

    I would like to configure CDP = https://crl.test.com/test.crl

    I'm pretty sure you don't want that. You MUST NOT serve CDP/AIA/OCSP URLs over HTTPS, use plain HTTP only. Otherwise you will enter into a endless loop while accessing CDP, because SSL certificate must be validated. Many cryptographic libraries will fail URL fetching if it is served over SSL. Leave HTTP as is.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.