Vista - ocsp support

hello,

is anywhere a list of all applications supporting OCSP checking on various
platforms such as Vista/2008/7/R2 etc.? Is this a generic feature revocation
checking on the systems which is by default used for all revocation checking
or is that dependent on each application asking for this type of check?

thank you very much.

ondrej

hello,

in Windows Server 2008 there is a recommandation about configuring OCSP with
either Windows Authentication for intranets or Basic Auth for internet
validations.

Is that for real? If I had OCSP path containing FQDN URL, this wouldn't be
local intranet site not even for local intranet clients and the access would
require providing login/password to a prompt.

With Basic, is the OCSP client on Vista willing to ask for the credentials
when logging on with smart card for example?

o.

Hi Ondrej,

Thank you for your post.

Regarding the question 1, I am afraid to say we don't have an application
list for supporting OCSP checking on various platforms. Thank you for your
understanding.

Regarding the question 2, when an application calls CryptoAPI 2.0 to verify
a certificate that specifies locations to Online Responders, it search the
local CryptoAPI 2.0 in-memory and disk caches to find a cached OCSP
response. If no acceptable cached response can be found, a request will be
sent.

For more information:

Online Responder Installation, Configuration, and Troubleshooting Guide
(Section: Understanding the Online Responder's Components)
http://technet.microsoft.com/en-us/l.../cc770413.aspx

Hope it helps.

Best regards,

Robinson Zhang
Microsoft Online Support

Hi

Please understand that the issue mostly is related to Windows Server
Security Setting, not Windows Vista. It is recommended to post the issue on
Windows Server Security
Newsgroup(microsoft.public.windows.server.security). There is more
qualified pool of respondents who can give you suggestions. Meanwhile,
other community members who visit the newsgroups regularly can either share
their knowledge or learn from your interaction with us. Thank you for your
understanding.

Hope it helps.

Best Regards,

Robinson Zhang
Microsoft Online Support

Hi Ondrej,

I have not heard from you yet. We wanted to see if the information provided
was helpful. If you need further assistance, please do not hesitate to let
me know. I am looking forward to your reply.

Best regards,

Robinson Zhang
Microsoft Online Support

yes, thank you for the info. it was quite definitive I didn't feel like
answer was necessary. so thank you.

as I understand it, Vista always tries to use OCSP (if possible) regardles
of application asking for the revocation status.

thank you very much.

ondrej.




""Robinson Zhang [MSFT]"" <v-robzha@xxxxxx> wrote in message
newsYKPCN%238JHA.2548@xxxxxx

Hi Ondrej,

I am glad to hear the information was helpful. If you would like further
assistance, please do not hesitate to let me know.

Thanks, and have a great day!

Best regards,

Robinson Zhang
Microsoft Online Support