When and how often does Acrobat download current CRL files to the security/CRLCache directory?

Report · Apr 10, 2018

For Acrobat Reader DC I find, under Appdata/Roaming, a Security/CRLCache directory, with Certificate Revocation List (CRL) files. These are used for verifying certificates for digital signatures, and are provided by an outside authority. How does Acrobat access current CRL files, and how often are they downloaded? I tried deleting the files in the CRLCache directory for Acrobat Reader DC and have been waiting for a few weeks to see if the software would provide a current file download.

Because of this revocation checks are not performed and the signature validity is unknown.

"Revocation checks could not be done possibly because you are not currently connected to a network" in Signature Proberties tab.

"The selected certificate is considered valid because it does not appear in the Certificate Revocation List (CRL) that is contained in the local cache" in the Revocation tab of Certificate Viewer.

CRL processing error

Issuer: cn=xxxxxxxx, xxxxxxxxxx, xxxxxxxxxx

This update: 20170608150530Z

Next update: 20170715150530Z

CRL has expired or is not yet valid____________________________________________________________ In the Problems encountered tab..

Please tell what is the issue and how to resolve this.

Report · Apr 10, 2018

The CRL in the cache has expired (July 15, 2017). CRLs are cached when downloaded, and that requires that you be connected to the internet. Since CRLs are issuer specific, there is no preemptive caching. They are only downloaded when needed. You need to be connected to the internet when validating a signature for this to happen.

Report · Apr 18, 2018

The answer is correct but I am connected to the internet but the crl is expired. In such case what are the other ways to verify the authenticity of a signature?

Thank you

Report · May 22, 2024

The Solution is Here.,

Goto Menu--> Preferences --> Signatures--> Verification --> More

untick "Require Certificate Revocation Suceed yxz..." Click OK.

Validate Signature.

Cheer Up..