[akpain]

Hi Everybody,

I recently add to my BESX the OCSP url and the LDAP url in the MDS config, the devices can search for certificates, but they can't validate them.

when I Open the certificate on the device, it show me
"Stale chain status"
"Unknown chain status".
revocation status: unknown

If I click on fetch status, it show me this

Internal proxy provider error

What I need to solve this ?





thanks



the ocsp url is

h t t ps://srv-serverXXX/ocsp

I use this guides

 docs.blackberry.com/en/admin/deliverables/25767/Configuring_how_apps_trusted_conn_to_web_servers_268738_11.jsp

btsc.webapps.blackberry.com/btsc/viewdocument.do?externalId=KB15786&sliceId=1&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl

BESX 5.0.4

Local MSDE

Exchange 2010

Windows 2008 R2 Sp2

[akpain]

Problem Solved


I was only OCSP URL configured, today I Added the CRL URL and begins work perfectly.

the question is... why doesn't work with OCSP ?


the official documentation say

BlackBerry® solutions can use either the OCSP server or the certificate revocation list, or both, to fetch the status of an S/MIME certificate.

Note: If an OCSP server is available in the environment, do not use the certificate revocation list to fetch certificate status.