Only on Win 7 Machines - "Revocation Information For the Security Certificate...."

[burgemaster]

I am running the connection test for "Adobe Connect" (Test Meeting Connection)

It works perfectly on all XP machines, but with Windows 7 machines I am getting the popup:

"revocation information for the security certificate for this site not available do you want to proceed"

Clicking OK, brings the popup back up over and over and then it fails the test.

Does anyone know why this might be happening? Ive moved the PC/Test User to a blank OU without any GPs applied but no joy.?

Is this SSL problems something that maybe needs to be enabled in Windows 7 ?

 

Thanks in advance

[cromertech]

Try installing the certificate and see if that helps. If so you'll need a group policy to install the certificate to your users

[SYNACK]

7 actually bothers to check, go into the cert and look for the crl url. Chuck that into a browser and see if you can get to it, it may need to be added to a filter exception list or something.

[burgemaster]

Thanks for replies

 

7 actually bothers to check, go into the cert and look for the crl url. Chuck that into a browser and see if you can get to it, it may need to be added to a filter exception list or something.

I can download the .CRL fine. I dont think its a filter option as WinXP works fine?

 

Try installing the certificate and see if that helps. If so you'll need a group policy to install the certificate to your users

Could you please have a look, i cant see an option to install this type of certificate?

 

Do your domain Win7 Machines pass these tests?

[tumbleweed]

Had this a while ago, think we had to whitelist crl.globalsign.net

 

Temporary workaround was Internet Options, Advanced,

down in the Security settings there's a couple of tick boxes to check for revocation.

Edited April 27, 2012 by tumbleweed

[burgemaster]

Thanks for all the replies, sorry its been a while. Its defenitly our smoothwall box blocking this. Will call support as the above whitelists do not work.

[KK20]

I had something similar to this a while ago (Java updates spring to mind but I cannot remember). I traced it back to windows checking revocation lists but not using the proxy (i.e. trying to go straight out rather than use I.E. settings like a good boy). Since some applications we have just dont play nice with proxy settings I ended up installing a proxy redirector on our gateway that went to a non-authenticated "whitelist only" squid proxy. I needed to add the CRL address onto that whitelist and all was good.

[ChrisMiles]

These problems can happen very often with certain services that use winhttp rather than iehttp to access the internet, I had the problem with RDP. Winhttp has seperate proxy settings, it does not use the IE ones. You can set the proxy for winhttp using netsh:

 

Using the WinHTTP Proxy Configuration Utility

[Arthur]

^ What Chris said. The same thing happens with Exchange servers that are behind proxies.

 

KB979694 - Error message when you import a third-party certificate into Exchange Server 2010: "The certificate status could not be determined because the revocation check failed"

[pete]

IIRC, I had to

a) import the cert + chain into Smoothwall

b) whitelist aqa.adobeconnect.com

 

but it was a fair while ago.

[KK20]

We use a WPAD solution to sort our IE and WinHTTP client/proxy configuration. It was JRE that caused the issue - I remember now. JRE *should* use IE settings (configured to do so and does by default) and can be seen to be using the correct proxy (via DG logs) but still cannot get the CRL resolution sorted internally within JRE. Some apps just wont play nice.