• Global community
    • Language:
      • Deutsch
      • English
      • Español
      • Français
      • Português
  • 日本語コミュニティ
    Dedicated community for Japanese speakers
  • 한국 커뮤니티
    Dedicated community for Korean speakers
Exit
0

When and how often does Acrobat download current CRL files to the security/CRLCache directory?

Community Beginner ,
Apr 10, 2018 Apr 10, 2018

Copy link to clipboard

Copied

For Acrobat Reader DC I find, under Appdata/Roaming, a Security/CRLCache directory, with Certificate Revocation List (CRL) files. These are used for verifying certificates for digital signatures, and are provided by an outside authority. How does Acrobat access current CRL files, and how often are they downloaded? I tried deleting the files in the CRLCache directory for Acrobat Reader DC and have been waiting for a few weeks to see if the software would provide a current file download.

Because of this revocation checks are not performed and the signature validity is unknown.

"Revocation checks could not be done possibly because you are not currently connected to a network" in Signature Proberties tab.

"The selected certificate is considered valid because it does not appear in the Certificate Revocation List (CRL) that is contained in the local cache" in the Revocation tab of Certificate Viewer.

CRL processing error

Issuer: cn=xxxxxxxx, xxxxxxxxxx, xxxxxxxxxx

This update: 20170608150530Z

Next update: 20170715150530Z

CRL has expired or is not yet valid____________________________________________________________ In the Problems encountered ​tab..

Please tell what is the issue and how to resolve this.

TOPICS
Security digital signatures and esignatures

Views

2.4K

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Engaged ,
Apr 10, 2018 Apr 10, 2018

Copy link to clipboard

Copied

The CRL in the cache has expired (July 15, 2017). CRLs are cached when downloaded, and that requires that you be connected to the internet. Since CRLs are issuer specific, there is no preemptive caching. They are only downloaded when needed. You need to be connected to the internet when validating a signature for this to happen.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Beginner ,
Apr 18, 2018 Apr 18, 2018

Copy link to clipboard

Copied

The answer is correct but I am connected to the internet but the crl is expired. In such case what are the other ways to verify the authenticity of a signature?

Thank you

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
May 22, 2024 May 22, 2024

Copy link to clipboard

Copied

LATEST

The Solution is Here.,

Goto Menu--> Preferences --> Signatures--> Verification --> More

untick "Require Certificate Revocation Suceed yxz..." Click OK. 

Validate Signature.

Cheer Up.. 

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines