[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ms-cryptoapi
Subject:    Re: Certificate chain
From:       "Fort, Wally" <Wally.Fort () MED ! VA ! GOV>
Date:       2001-11-30 0:57:01
[Download RAW message or body]


I have a similar question about Certificate Chain.
Mine is how do I know that it has gone out on the web to get the CRL's.

Does it cache the results for the next call.

-----Original Message-----
From: Amiler Scumba [mailto:amiler_scumba@HOTMAIL.COM]
Sent: Monday, November 12, 2001 2:19 AM
To: CryptoAPI@DISCUSS.MICROSOFT.COM
Subject: Certificate chain


Is there any more detailed documentation (that the one provided in MSDN)
which described how certificate chains are build by CertGetCertificateChain.

I have the following questions:

It looks like, that the building is a 2 phase process. What happens in pahse
1, what in phase 2?

How is the quality of certificate chain determined?

Is it possible to completelly disable revocation checking?

How is revocation checking done?

What protocols are supported LDAP?  Is OID_NETSCAPE_REVOCATION_URL supportd,
  what about OID_PKIX_OCSP (on line certificate status protocol)? Cn
certificate revocation checking be customized.

I have a computer that is not connected to Intranet and can not access CRL
distribution points. How can I disable Internet lookup? Is
CERT_CHAIN_REVOCATION_CHECK_CACHE_ONLY appropriate flag (it does not work on
win 9x, NT)?

What is an URL-based objects? It this a CRL accessible through URL
(LDAP://...)

BYe,
  Amiler




_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

----------------------------------------------------------------
Users Guide http://discuss.microsoft.com/archives/mailfaq.asp
contains important info. Save time, search the archives at
http://discuss.microsoft.com/archives/index.html .
To unsubscribe, mailto:CryptoAPI-signoff-request@DISCUSS.MICROSOFT.COM

----------------------------------------------------------------
Users Guide http://discuss.microsoft.com/archives/mailfaq.asp
contains important info. Save time, search the archives at
http://discuss.microsoft.com/archives/index.html .
To unsubscribe, mailto:CryptoAPI-signoff-request@DISCUSS.MICROSOFT.COM

[prev in list] [next in list] [prev in thread] [next in thread]