I found this very usufull i however have a question ..
CAs maintain CRLs and publish them to specific CRL distribution points. The CRL distribution points are included in the CRL Distribution Points property of the certificate. If the CRL distribution points cannot be
contacted to check for certificate revocation, then the certificate revocation check fails.
We have three distribustion CRL distribution points. One of the points was offline and the Radius server failed to check the othre two pointss.
can ccomeone please explain how the radius server decides what CRL puiont to use.. I would have expected it to use the other two if one fails ??
Bookmarks