Does Notes really make use of CRL Distribution List? How?

HCL Domino Domino Forum
1

Good Day,Notes supports two types of certificate namely Notes certificate and x.509 certificate.

I can see that Notes x.509 CA supports CRLs. I’ve created a certificate with an attributes namely CRL Distribution Point which shall identify the CRLs location. However i can’t make it work with Notes.

Anybody had been configured the CRLs with Notes succesfully before? or Notes just support it but didn’t really use it.

Any respond/solution/answer is highly appreciated ASAP.

Regards,

Sufyan

2

Subject: Are you asking about CRL with Notes ID’s?

The CRL functionality in ND6 is for x.509 certs and not Notes Certificates. The server deny access list is effectively the CRL for Notes users.

3

Subject: i mean x.509 certs

Thanks for your response…

Yes, what I’ve meant is x.509 certs. They have an attributes to specify the CRL Distribution List location.

i’d defined it in one of the x.509 certs that i’ve installed in one user id.

To test it, i’ve configure a web server that Notes should refer to search for the CRL. Then i send an encrypted email through the internet, which Notes shall then use the x.509 certs for S/MIME purposes.

BTW, seems like Notes doesn’t refer to the CRL Distribution Point or the Web server. (based on access log at the web server).

So, maybe i should do some configuration or i’ve missed something?

regards,

Sufyan