Friday, 23 October 2009

CRL Tshooting

Certificate Revocation and Status Checking

To get rid of client CRL cache

According to this paper the CRL can be cached in various locations:
- Memory
- Local File System.
In order to clear the CRL cache immidietly do the following:

1. Memory
– You need to restart the application which is checking the CRL validity as it seems that in my case when using CAPICOM isValid the state is not refreshed immidiatly until the process restarts.note: if you are trying to debug inside Visual Studio you will have to close and open the Studio of just start the process outside the studio for the memory to get refreshed.

2. Local File System
– the cache file is stored in the following directories:\Document and Settings\Username\Application Data\Microsoft\CryptnetUrlCache\Methadata Delete the file in this directory.

( if this procedure haven’t worked for you for some reason I've found out that there is a similar directory under %windir%\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache but i didn’t have to touch it)

No comments: