Windows 10: certutil check OCSP status using HTTP GET method.

I use certutil to check the Status of certificates, which have only OCSP URL but not CRL Distribution Point. In this case certutil performes a HTTP GET request and not HTTP POST and encodes URL characters as / and \. This is Problem for some OCSP responders. Is it posible to configure certutil to use always the HTTP POST method by performing OCSP Request?

:)

 

certutil check OCSP status using HTTP GET method.

I use certutil to check the Status of certificates, which have only OCSP URL but not CRL Distribution Point. In this case certutil performes a HTTP GET request and not HTTP POST and encodes URL characters as / and \. This is Problem for some OCSP
responders. Is it posible to configure certutil to use always the HTTP POST method by performing OCSP Request?

 

certutil check OCSP status using HTTP GET method.

Hi,



Thank you for writing to Microsoft Community Forums.



I understand this is an important feature for you and you want this to work, you can go through this article

Certutil and check if this is helpful to you. However, I suggest you to post your query on

TechNet forums, where we have support professionals who are well equipped with the knowledge on this issue to assist you with your query.



Regards,

Amit Sunar

Microsoft Community – Moderator

 

OCSP Verification failed with error code

Hi All,

Can you please help us with following error while configuring OCSP while validating through below command. CDP and AIA is working but OCSP validation have issue. Though OCSP configuration showing no error.

certutil -verify -urlfetch C:\Users\user\Desktop\test.cer



---------------- Certificate OCSP ----------------

Failed "OCSP" Time: 0

Error retrieving URL: Method not allowed (405). 0x80190195 (-2145844843 HTTP_E_STATUS_BAD_METHOD)


http://crl2.domain.local/ocsp

Also PKI view shows below error:





Please find the environment details as follows.

Currently we have two enterprise PKI env.

Old Env: Single Server served as Root CA and Issuing CA

New Env: Two layer architecture: Offline Root CA and Enterprise Issuing CA