DynamicID authentication fails due to server certificate validation failure, if the server certificate does not contain a CRL distribution point

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk167177
Technical Level
Product	Mobile Access / SSL VPN, Endpoint Security Client, Endpoint Security VPN
Version	R80.10, R80.20, R80.30, R80.40
Date Created	01-Jun-2020
Last Modified	10-Jun-2020

Symptoms

DynamicID authentication fails due to a server certificate validation failure, if the server certificate does not contain a CRL distribution point.
Related errors found in debug are:

cp_verify_certificate: chain level: 0, error: Could not retrieve CRL.

finished with result code (-10) - (servercert: Error - server certificate validation failed!)

[AU] dynamic_id_manager_callback(au=e13cece8): DynamicID faliure

[CPSC] cpsc_get_msg_by_id: Cache HIT for CPSC_DID_REQUEST_FAILED

Cause

The system considers the server certificate to be "untrusted", if it does not contain a CRL DP (Certificate Revocation List Distribution Point).

Solution

Note: To view this solution you need to Sign In .