Skip to main content
Participant
May 10, 2021
Question

Digital signature verification, revocation info not found

  • May 10, 2021
  • 1 reply
  • 3464 views

Hello all

 

I've encountered a problem where Adobe Reader DC claims to not find revocation information in the leaf and issuing CA certificates.

 

I have checked both certificates and the OCSP and CRL urls are present in the 'authority info access' and 'crl distribution points' extensions respectively.

 

I'm quite sure thiss worked in older versions of Adobe Reader.

Has something changed in the signature verification requirements/procedures?

 

Any help or pointers are very welcome.

 

 

 

This topic has been closed for replies.

1 reply

Amal.
Legend
May 11, 2021

Hi Rre

 

Hope you are doing well and sorry for the trouble. As described you are getting the pop up for revocation information  not found

 

Please try the following steps and see if that helps:

- Ensure all OS updates and the virus software is update to date

- Try temporarily disabling the security software on your computer and see if it helps
Note: Please turn on the security after testing to avoid any security risks.

- Also please try going through the steps here: How to resolve connection errors with Adobe Creative Cloud and Creative Suite applications

- Please try to create a new test user profile in Windows or enable the root account in Mac and try using the application there and check

- You may also try to do a restore or system recovery to a time prior to the having the issue and see if that helps.

 

Regards

Amal

 

 

Rre TAuthor
Participant
May 11, 2021

Hi Amal

 

Thank you for your reply.

I have looked into your suggestions and am still finding no joy.

System restore does not go far back enough.

 

I suspect that this is either a (seemingly undocumented) change in behaviour by Acrobat Reader, or it is a bug.

 

I noticed that where the revocation checks work, the authority info access extension of the issuing CA certificate has both the OCSP and the CA Issuers methods.

 

When the authority info access extension of the issuing CA certificate has only the OCSP method then the revocation information is displayed as not found. When this occurs, the Acrobat Reader seems to completely ignore the CRL distribution points extension.

 

 

 

 

Amal.
Legend
May 12, 2021

Hi there

 

We are sorry to hear that. A new version of Adobe Acrobat Reader DC is now available version 21.01.20155, please try to update the application from the help menu > check for updates  and see if that works for you.

 

Regards

Amal