BlackBerry Forums Support Community

BlackBerry Forums Support Community (http://www.blackberryforums.com/)
-   BES Admin Corner (http://www.blackberryforums.com/bes-admin-corner/)
-   -   Help -- fetch certificate status - Internal proxy provider error (http://www.blackberryforums.com/bes-admin-corner/263745-help-fetch-certificate-status-internal-proxy-provider-error.html)

akpain 03-11-2013 09:58 AM

Help -- fetch certificate status - Internal proxy provider error
 
Hi Everybody,

I recently add to my BESX the OCSP url and the LDAP url in the MDS config, the devices can search for certificates, but they can't validate them.

when I Open the certificate on the device, it show me
"Stale chain status"
"Unknown chain status".
revocation status: unknown

If I click on fetch status, it show me this

Internal proxy provider error

What I need to solve this ?





thanks



the ocsp url is

Code:

h t t ps://srv-serverXXX/ocsp




I use this guides

Code:

docs.blackberry.com/en/admin/deliverables/25767/Configuring_how_apps_trusted_conn_to_web_servers_268738_11.jsp
Code:

btsc.webapps.blackberry.com/btsc/viewdocument.do?externalId=KB15786&sliceId=1&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl

BESX 5.0.4

Local MSDE

Exchange 2010

Windows 2008 R2 Sp2

akpain 03-11-2013 02:47 PM

Re: Help -- fetch certificate status - Internal proxy provider error
 
Problem Solved


I was only OCSP URL configured, today I Added the CRL URL and begins work perfectly.

the question is... why doesn't work with OCSP ?


the official documentation say
Quote:

BlackBerry® solutions can use either the OCSP server or the certificate revocation list, or both, to fetch the status of an S/MIME certificate.

Note: If an OCSP server is available in the environment, do not use the certificate revocation list to fetch certificate status.


All times are GMT -5. The time now is 08:21 PM.

Powered by vBulletin® Version 3.6.12
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.