Problem with OSCP revocation checking

Hi,
since patch 10.1.3 we have a problem with Adobe Reader on englisch OS (xp sp3 and win7, all MS Updates installed).
We use a software deployment system to install Adobe Reader and preset some preferences for signing pdf documents (preferences/security/advanced preferences/windows integration -> all three boxes checked).
When a user opens Adobe Reader there is a process starting after about 10 seconds to check certificate revocation and a small progress window appears:
Contacting http://oscp.verisign.com for OSCP based revocation checking, press ESC to cancel
With this process starting the CPU load rises to 99% on a single core or 50% on a dual core and Adobe Reader is frozen.
Unchecking the revocation checking (preferences/security/advanced preferences/verification -> Require certificate revocation...) is not an option due to security reasons.
Patch 10.1.4 didn't fix this problem. Interestingly we don't have this problem on our computer with german OS and german Adobe Reader.
Any ideas?
greetings
DJWG49

Similar Messages

Has anyone had a problem with depositing a check with the app for Bank of America?

Has anyone had a problem with depositing a check on a bank app?

Is the check something like a payroll check where its digitally printed and all in text?, or is it a handwritten check?
from my experience handwritten checks rarely work, myself and friends have always recieved an error stating the picture was to blurry no matter how many times we took a picture. From what i have read with others who have issues with depositing handwritten checks, some checks are deemed to blurry based on the handwriting, therefore the app wont accept the check, while other handwritten check will be accepted just fine, i hope this resolves your issue's and concerns

TS1702 Hello, I,m having problems with Polish spell check. It says in iPnstruction that this App (pages) should show my writing mistakes. Check spell button is on but but check spell is not working. Need help Please.

Hello, I,m having problems with Polish spell check. It says in iPnstruction that this App (pages) should show my writing mistakes. Check spell button is on but but check spell is not working. Need help Please.

Hello, I,m having problems with Polish spell check. It says in iPnstruction that this App (pages) should show my writing mistakes. Check spell button is on but but check spell is not working. Need help Please.

Problem with Foreign Key check in an editable ALV

Hi,
I've implemented an editable ALV.
The underlying context node is referenced to a structure and within the structure the foreign keys are defined.
In my example, I have two editable columns with different foreign key checks.
My problem is, the foreign key check works only for one column.
So if I enter in both columns incorret values, only a message for the first column is thrown,
but not for the second column!
Only if I enter two errors in one(!) column (in two rows), than I get two error messages.
Examples:
does not work:
COL1 | COL2
err1 | err2   -> only one error message is displayed (for err1)
It works in this case:
COL1 | COL2
err1 | ok
err2 | ok
=> two messages for err1 and err2
and in this case
COL1 | COL2
err1 | ok
ok     | err2
=> two messages for err1 and err2
I've found nothing in OSS. My system is a 7.00 with SP18, so OSS 1153492 is already implemented.
Do I somenthing wrong or is this an error in SAP?
Thanks,
Andreas

Hi Lekha,
thank you very much for your support!
I try to give you an example.
In general, you need an editable ALV with at least two columns.
The node for the ALV table in the component controller has to be assigned to a dictionary structure!
That is very important, otherwise the foreign key check will not work!
And the two fields in this dictionary structure have to be assigned to a "check table".
Prerequisition: NW70 SP16 or higher! See oss note 1153492.
Maybe an easy way to reproduce it is using the WD component WDT_FLIGHTLIST_EDIT.
So copy this component to a Z-component.
Than create a dictionary structure for the node "NODE_FLIGHTTAB" with the same 10 fields as the node attributes.
In your new dictionary structure, assign to the fields CARRID and CONNID the check tables SCARR and SPFLI. (see table SFLIGHT).
Than make both columens (CARRID and CONNID) editable.
This has to be done in the "RESULTVIEW" in the method "INIT".
You can user the following code:
lr_column = lr_column_settings->get_column( 'CARRID' ).
create object lr_input_field
    exporting
      value_fieldname = 'CARRID'.
lr_column->set_cell_editor( lr_input_field ).
lr_column = lr_column_settings->get_column( 'CONNID' ).
create object lr_input_field
    exporting
      value_fieldname = 'CONNID'.
lr_column->set_cell_editor( lr_input_field ).
Copy this code below this code:
lr_column_settings ?= l_value.
lr_column = lr_column_settings->get_column( 'PRICE' ).
create object lr_input_field
    exporting
      value_fieldname = 'PRICE'.
lr_column->set_cell_editor( lr_input_field ).
Than just activate all, create a Web Dynpro Application and your are ready to test it.
To test it, do the following:
Append/Insert an empty row.
Enter a CARRID and CONNID that does not exist and press ENTER.
My result: only one error message is displayed for the wrong CARRID, but no error message for CONNID!
Insert a new row.
Enter in the first row, column CARRID an invalid value and in the second(!) row in column CONNNID.
Than you get two(!) error messages. That's the behavior I expect.
So thank you very much in advance for your help!
Regards,
Andreas

Problem with simple error checking

Scratch the error checking bit. The original code involved error checking, but I've dwindled the problem down to the following code:
int input;
cout << endl << "Enter number: ";
cin >> input;
if (isnumber(input) == 0)
cout << "Not a number";
else
cout << "Is a number";
How is it that, when I enter the number 2 as input for this program, I get the response "Not a number." I get the same response when I enter something that actually is not a number, like the character 'a', as input. No matter what, it displays "Not a number."
This seems really basic to me. Am I missing something obvious here?

As far as isnumber() goes, I made a mistake. Apparently isnumber() is also a function because it didn't raise an error, but it was a typo -- the function I meant to use was isdigit(), not isnumber(). So, I changed the function isnumber() to isdigit(), but still got the exact same result.
I've since figured out what the problem is, though. The function isdigit() was given in the notes my professor provided, along with isalpha(), ispunct(), isspace(), isupper(), and islower(). It occurred to me that these functions are intended to be used with single characters, and in my code I had defined the variable input as an int. So, I changed input to data type char and it worked fine.
So, that solves that issue, but raises another. Consider the following code, if you will:
int numHands;
while (numHands < 1 || numHands > 7)
cout << endl << "How many hands do you want to play: ";
cin >> numHands;
if (numHands < 1)
cout << endl << "You must play at least one hand...";
wait();
else if (numHands > 7)
cout << endl << "You can not play more than seven hands...";
wait();
This is a simple bit of error checking to make sure that the number that the user enters is between 1 and 7, and in that regard, it works fine. It does not, however, ensure that what the user enters is a number in the first place. My original solution to this was the following code:
while (numHands < 1 || numHands > 7 || isdigit(numHands) == 0)
cout << endl << "How many hands do you want to play: ";
cin >> numHands;
if (numHands < 1)
cout << endl << "You must play at least one hand...";
else if (numHands > 7)
cout << endl << "You can not play more than seven hands...";
else if (isdigit(numHands) == 0)
cout << endl << "You did not enter a number...";
When this didn't work, it prompted me to post this thread, but as I mentioned at the beginning of this post, I realized that the reason it didn't work was because isdigit() works with char and not int data types, and I obviously can't declare numHands as a char because the user could enter more than one character as input.
How, then, can I error check to ensure that the user's input is, in fact, a number?

Problem with payment and check

HI
My problem is the following; there were a invoce that arrived and it was paid 50% in advanced.
According to the invoice, it is supposed that in the Project Builder the complete quantity loaded to each project should be entered, and to the CIP.xxxx is loaded 50% that had been paid. That value in negative sign, to be able to cancel and to compense it. When one tries to enter this quantity in negative, the system show the following message: " only allowed numbers in positive." If we not carried out the before mentioned the check will come out for 100% of its value including 50% that was already paid.
I need to know how to do the following:
The check comes out for 50% that is the amount we have to pay and at the same time to enter in Project Builder the total that goes loaded to each project.
Thanks in advance for your help
Message was edited by:
        Christian Meier
Message was edited by:
        Christian Meier

I want to clarify the transaction as under:
1] The reciept of goods [100 % value that you book to the project] is one thing; 2] the payment to the vendor [ 50%] is another.
Going by the above ,
You can treat the 50% Advance payment as 'down payment" [ Spl.GL Transactions].Use t/ code: F-48.
Once the material in entiriety is supplied you can regularize this down payment[T.code:FBA8].
For the supply made,you can book the entire 100% in the system.
Hope this clarifies your doubt.

Problem with Flash Version check

When I added my Flash movie to my page in Dreamweaver, it
added a check for the current version of Flash.
onload="MM_CheckFlashVersion('7,0,0,0','Content on this page
requires a newer version of Macromedia Flash Player. Do you want to
download it now?');"
Problem is IE7 chokes on this because it doesn't know how to
execute MM_CheckFlashVersion. I can't find it either!
What am I missing?
TIA,

Why would you want to do this? Yes, when I am at home I can
download
anything I want and keep my Flash Player current. But how
many people
spend their days (yes, including breaks and lunch hours) on
company
intranet computers strictly controlled by an IT department? I
can
assure you that many companies, including government,
universities, and
nonprofits, have better things to do than upgrade the Flash
Player, Real
Player, and Adobe Reader on 100s of computers. And I doubt my
mom, for
instance, could really be bothered downloading something just
to see
your content.
If you want people to see your content, you should make sure
it is
viewable a couple versions back. I think we are up to Version
7 in my
office now.
Of course, if you have control over your visitors' player or
you don't
care that some people won't be able to view your content,
then it
doesn't matter.
Bonnie
Chesterfield55 wrote:
> When I added my Flash movie to my page in Dreamweaver,
it added a check for the
> current version of Flash.
>
> onload="MM_CheckFlashVersion('7,0,0,0','Content on this
page requires a newer
> version of Macromedia Flash Player. Do you want to
download it now?');"
>
> Problem is IE7 chokes on this because it doesn't know
how to execute
> MM_CheckFlashVersion. I can't find it either!
>
> What am I missing?
>
> TIA,
>
>
>

Problem with display of check boxes in 10.1.7

We create PDF versions of our infopath documents for users to download. Several users who have upgraded to 10.1.7 report that any checkboxes or radio buttons come out flat and blank. They display fine in 10.1.6 and older and version 11. Only 10.1.7 seems to be affected. Any one else seen this issue?

We can change a setting on our tool to add the fonts to the file and then they start working again but file size doubles.
5.16 Select PDF Standard (PDF/A, PDF/X, PDF/SiqQ) By default the converter can generate PDF documents in conformance with PDF 1.4 standard. This standard is accepted by Adobe Reader 5.0 and the later versions of the Adobe Reader. Using the PdfConverter.PdfStandardSubset property the converter can be instructed to generate PDF documents in conformance with PDF/A, PDF/X and PDF/SiqQ and standards. These standards impose additional restrictions to the generate document. The PDF/A-1b standard (ISO 19005-1), used for long-term archiving of PDF documents, requires that all the true type fonts used by the document to be embedded in the document, the http links are disabled, the document does not use transparent objects, the document information properties are disabled. PDF/X-1a:2003 standard (ISO 15930-4), used to facilitate graphics exchange, requires that all the true type fonts used by the document to be embedded in the document, the http links are disabled, all the graphics are in CMYK color space, the document does not use transparent objects. PDF/SiqQ is a standard used by Adobe to ensure that a digitally signed document does not contain items that could alter its appearance when viewed in different environments. A PDF/SiqQ compliant document requires that all the true type fonts used by the document to be embedded in the document and the http links to be disabled.

Problems with material availability check

Hi
In my process wehn i check the material availability in the production order its getting commited even though its not available.why is it happenening so.

Hi,
Go to OPJK, for the order type - plant combination for business functions 1 & 2, check which rule is associated. Now in OPJJ, check which stocks & receipts are being considered for the same. Also check if the need date of the part is after the Replenishment lead time of the material. The Check without RLT check box might be blank in the checking rule & this might be the reason why the system is committing the stock as the need date might be after the RLT.
Check the above & revert if it does not resolve the issue.
Regards,
Vivek

Problem with multiple vendor Check printing with F110

while printing check using F110, like to print more than one vendors. but it is printing frist vendor check only , remaining it is not printing. please help on this issue

Hi,
    follow below logic
    in xk02 enter multiple email address using
     option and select any email id as default.
     select adrnr from lfa1 into gv_adrnr
       from lfa1 where vendor in s_vendor.
      select ADDRNUMBER smtp_address into it_address
         where ADDRNUMBER gv_adrnr.
     loop at it_address.
          RECLIST-RECEIVER = IT_address-smtp_address.
          RECLIST-REC_TYPE = 'U'.
          APPEND RECLIST.
          CLEAR RECLIST.
    endloop.
   CALL FUNCTION 'SO_NEW_DOCUMENT_ATT_SEND_API1'
       EXPORTING
          DOCUMENT_DATA              = DOC_CHNG
          PUT_IN_OUTBOX              = 'X'
       IMPORTING
          SENT_TO_ALL                = SENT_TO_ALL
        NEW_OBJECT_ID              =
       TABLES
          PACKING_LIST               = OBJPACK
          OBJECT_HEADER              = OBJHEAD
          CONTENTS_BIN               = OBJBIN
          CONTENTS_TXT               = OBJTXT
          RECEIVERS                  = RECLIST
       EXCEPTIONS
          TOO_MANY_RECEIVERS         = 1
          DOCUMENT_NOT_SENT          = 2
          DOCUMENT_TYPE_NOT_EXIST    = 3
          OPERATION_NO_AUTHORIZATION = 4
          PARAMETER_ERROR            = 5
          X_ERROR                    = 6
          ENQUEUE_ERROR              = 7
          OTHERS                     = 8.
Regards
Amole

Problems with FaceTime not check my e-mail.

I'm trying to use the faceTime on my MacBoook Pro but after entering the ID and Password I have a message that the system can not verify my e-mail.
I'm using the same e-mail I use for my Apple Store and other devices (Iphone & Ipad).

abdohms,
The article linked below details a number of troubleshooting steps that can help get your signed into FaceTime on your Mac.
Get help signing in to FaceTime, Game Center, Messages
https://support.apple.com/en-us/HT204408
Cheers,
Allen

Java Webstart application problem with TLS certificate revocation checks (Java 1.7.0_76)

We have a problem with our Java Web Start Application regarding the TLS certificate revocation check:
The application is running on a server within a wide area network which is separated from the internet.
The application users have access to the WAN, and also access to the internet over some corporate proxy/firewall.
The user has to enter, for example "https://my-site.de/myapp/ma.jnlp" within a webbrowser or could also call "javaws https://my-site.de/myapp/ma.jnlp" to start the application client.
The webserver has a certificate from a trusted certificate authority. This certificate seems to be ok, the browser is even configured to perform OCSP status check.
The application files are signed with a certificate from another trusted certificate authority. This certificate seems also to be ok. Regarding this certificate there
are no problems with certificate revocation checks.
The problem is, while starting the application client there is a message box which tell us something like "the connection to this website ist not trustworthy",
"Website: https://my-site.de:80", and something about an invalid certificate, meaning the webserver certificate.
Obviously the jvm runtime, which is executed on the users workstation, tries to perform a revocation check for the webservers certificate, but this fails because
it cannot fetch the certificate under https://my-site.de:80.
The application will execute without further problems after that message but the users are very concerned about the "invalid" certificate, so here are my questions:
- Why is the application trying to get the webserver certificate over Port 80. Our application developers told me, there is no corresponding statement. Calling this address
has to fail while "https://my-site.de:443" or "https://my-site.de" would not have a problem.
- Is there a way to make the application go on without performing a tls revocation check? I mean, by adjusting the application sourcecode and not by configuring the users Java Control Panel.
While disabling the TLS Certificate Revocation check in the Java Control Panel, the Webstart Application executes without a warning message, but this is not a workable solution for
our users.
It would be great if someone can help me with a hint so i can send our developers into the right direction;-)
Many thanks!
This is a part from a java console output after calling "javaws -verbose https://my-site.de/myapp/"
(sorry for this is in german... and also my english above)
network: Verbindung von http://ocsp.serverpass.telesec.de/ocspr mit Proxy=HTTP @ internet-proxy.***:80 wird hergestellt
network: Verbindung von http://ocsp.serverpass.telesec.de/ocspr mit Proxy=HTTP @ internet-proxy.***:80 wird hergestellt
security: OCSP Response: GOOD
network: Verbindung von http://ocsp.serverpass.telesec.de/ocspr mit Proxy=HTTP @ internet-proxy.***:80 wird hergestellt
security: UNAUTHORIZED
security: Failing over to CRLs: java.security.cert.CertPathValidatorException: OCSP response error: UNAUTHORIZED
network: Cacheeintrag gefunden [URL: http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl, Version: null] prevalidated=false/0
cache: Adding MemoryCache entry: http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl
cache: Resource http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl has expired.
network: Verbindung von http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl mit Proxy=HTTP @ internet-proxy.***:80 wird hergestellt
network: Verbindung von http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl mit Proxy=HTTP @ internet-proxy.***:80 wird hergestellt
network: ResponseCode für http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl: 200
network: Codierung für http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl: null
network: Verbindung mit http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl trennen
CacheEntry[http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl]: updateAvailable=true,lastModified=Tue Mar 24 10:50:01 CET 2015,length=53241
network: Verbindung von http://crl.serverpass.telesec.de/rl/TeleSec_ServerPass_CA_1.crl mit Proxy=HTTP @ internet-proxy.***:80 wird
network: Verbindung von socket://ldap.serverpass.telesec.de:389 mit Proxy=DIRECT wird hergestellt
security: Revocation Status Unknown
com.sun.deploy.security.RevocationChecker$StatusUnknownException: java.security.cert.CertPathValidatorException: OCSP response error: UNAUTHORIZED
    at com.sun.deploy.security.RevocationChecker.checkOCSP(Unknown Source)
    at com.sun.deploy.security.RevocationChecker.check(Unknown Source)
    at com.sun.deploy.security.RevocationCheckHelper.doRevocationCheck(Unknown Source)
    at com.sun.deploy.security.RevocationCheckHelper.doRevocationCheck(Unknown Source)
    at com.sun.deploy.security.RevocationCheckHelper.checkRevocationStatus(Unknown Source)
    at com.sun.deploy.security.X509TrustManagerDelegate.checkTrusted(Unknown Source)
    at com.sun.deploy.security.X509Extended7DeployTrustManagerDelegate.checkServerTrusted(Unknown Source)
    at com.sun.deploy.security.X509Extended7DeployTrustManager.checkServerTrusted(Unknown Source)
    at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)
    at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
    at sun.security.ssl.Handshaker.processLoop(Unknown Source)
    at sun.security.ssl.Handshaker.process_record(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
    at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
    at sun.net.www.protocol.https.HttpsClient.afterConnect(Unknown Source)
    at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Unknown Source)
    at sun.net.www.protocol.http.HttpURLConnection.getInputStream(Unknown Source)
    at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(Unknown Source)
    at com.sun.deploy.net.HttpUtils.followRedirects(Unknown Source)
    at com.sun.deploy.net.BasicHttpRequest.doRequest(Unknown Source)
    at com.sun.deploy.net.BasicHttpRequest.doGetRequestEX(Unknown Source)
    at com.sun.deploy.cache.ResourceProviderImpl.checkUpdateAvailable(Unknown Source)
    at com.sun.deploy.cache.ResourceProviderImpl.isUpdateAvailable(Unknown Source)
    at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
    at com.sun.deploy.cache.ResourceProviderImpl.getResource(Unknown Source)
    at com.sun.deploy.model.ResourceProvider.getResource(Unknown Source)
    at com.sun.javaws.jnl.LaunchDescFactory._buildDescriptor(Unknown Source)
    at com.sun.javaws.jnl.LaunchDescFactory.buildDescriptor(Unknown Source)
    at com.sun.javaws.jnl.LaunchDescFactory.buildDescriptor(Unknown Source)
    at com.sun.javaws.Main.launchApp(Unknown Source)
    at com.sun.javaws.Main.continueInSecureThread(Unknown Source)
    at com.sun.javaws.Main.access$000(Unknown Source)
    at com.sun.javaws.Main$1.run(Unknown Source)
    at java.lang.Thread.run(Unknown Source)
    Suppressed: com.sun.deploy.security.RevocationChecker$StatusUnknownException
        at com.sun.deploy.security.RevocationChecker.checkCRLs(Unknown Source)
        ... 35 more
Caused by: java.security.cert.CertPathValidatorException: OCSP response error: UNAUTHORIZED
    at sun.security.provider.certpath.OCSP.check(Unknown Source)
    at sun.security.provider.certpath.OCSP.check(Unknown Source)
    at sun.security.provider.certpath.OCSP.check(Unknown Source)
    ... 36 more
security: Ungültiges Zertifikat vom HTTPS-Server
network: Cacheeintrag nicht gefunden [URL: https://my-site.de:80, Version: null]

Add the JSF Jars to the WEB-INF/lib directory of the application. If still getting error add to the CLASSPATH variable in the startWebLogic script in the domain/bin directory.

Problem with Material Confirmation (Availability Check)

Dear All,
There is a problem with the availability check. when i place order system does availability check and confirms the order. Now say for example i have 100qty of material - X and i created order for 50qty, system confirmed and then i went on creating orders for this , say i have created orders for it for 150qty, so system has confirmed 100 and 50 on future date.
Now when i try to do the delievry for the first order(50 qty), system gives me an error that "0" qty is available.
Can you please tell me what may be the reason for this.
Thanks,

You can also check in T-code Co09 of the availability. Best and easy one to read for me has been MD04 Transaction code.
What system does in Sales Order is that it plans the requirement taking into consideration Material availability and if material doesn't exist but sees that in a few days in the future material will be available so system confirms it. Note that physically the material may not even be present. You find out if you really have physical stock in the delivery. For example in the sales order in the future the system sees that a Purchase Order will take place so system confirms it. Even though physically you have not even done a goods receipt for that PO. So any Sales Order which has been created before holds that reservation. So if you make a PO goods receipt in the future all those sales order has taken up this stock even. So the new sales order you created may not even have physical stock present or available as back order exists.
If you delete Deliveries that have not had PGI done to them this will take the requirement out of the list of Deliveries you can see this in MMBE if you scroll to the right. You can also do reason for rejection for other old orders to take out reservation in MD04.
Good Luck
Ali Lozada

Availability check problem - with item category(TAN and TANN)

Hi All,
We have a problem with the availability check in the standard order. Suppose if I give the item category as TAN, the availabilty check is green for that line item. If I change the item category from TAN to TANN, then the availabilty check is red.
How Item categories influence the availability check? Is availability check also depend on customer?
Thanks & Regards,
Anil.

Hi ,
please check in this path.
Customer Relationship Management>Basic Functions>Availability Check>Assign ATP Profile to Item Category
In this step you assign the ATP profile to an item category:
1. Choose the relevant item category.
2. Enter the name of the ATP profile in the ATP profile field.
If this field is empty, no availability check is carried out.
ATP profile-
1. A key that is assigned to the item category of a sales transaction item to control whether availability check takes place for this item.
2. If availability check is carried out in SAP Advanced Planner and Optimizer (SAP APO), the name of the requirements profile in SAP APO is used for the ATP profile in CRM Online to carry out the following functions in SAP APO:
-ATP check
-Transfer of requirements
-Delivery scheduling
-Transportation scheduling
Hope it will useful.
thanks
Hemant ghiya

RDS Gateway 2012, RemoteApp Displays "A Revocation check could not be performed for the Certificate" via RDWEB

I have searched through the forums and there are a number of posts that are similar but all the checks they list seem to not apply to this one.
My current setup is as follows
All Servers are 2012 R2
1 x DC server
1 x RDS Gateway server with RDS Web installed
1 x Session Host Server
Certificate supplied by godaddy with 5 names. (included is the name of the RDS Gateway/Web server in the certificate, the internal name of the session host server is not included as the internal names are differnet to the external)
My tests are as follows
Navigating to the RDSWEB page from a machine inside the same network (windows 7 sp1) but not on the same domain is fine no errors and logging in and launching any published application is fine with no errors.
However logging in on another machine that is external from the network (windows 7 sp1) is ok up to the point of launching any of the published apps I get the error about ""A Revocation check could not be performed for the Certificate". this
prompts twice but does allow you to continue and login and use the app till the next time. If I view the certificate from the warning message all appears to be ok with all certs in the chain.
I have imported the root and intermediate certs to each of the gateway/rdsweb server and session host server into the computer cert store just to be on the safe side. This has not helped, I have also run the following command from both windows 7 machines
with no errors on either
certutil -f –urlfetch -verify c:\export.cer
I cant seem to see where this is failing and I am beginning to think there is something wrong with godaddy cert itself somehow.
If I skip rdsweb and just use MSTSC with the gateway server settings then I can login to any machine on the network with no errors so this is only related to launching published apps on the 2012 R2 RDWEB or session host servers.
Any help appreciated

Hi,
1. Please make sure the client PCs have mstsc.exe (6.3.9600) installed.
2. If you are seeing a name mismatch error, you can set the published name via this cmdlet:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
To be clear, the above cmdlet changes the name that shows up next to Remote computer on the prompt you see when launching a RemoteApp. You should have a DNS A record on your internal network pointing to the private ip address of your RDCB server.
Additionally, in RD Gateway Manager, Properties of your RD RAP, Network Resource tab, you should select Allow users to connect to any network resource or if you choose to use RD Gateway Managed group you will need to add all of the appropriate names to the
group.
For example, when launching a RemoteApp you would see something like Remote computer: rdcb.domain.com and Gateway server: gateway.domain.com . Both of these names need to be on your GoDaddy certificate.
Please verify the above and reply back so that we may assist you further if needed. It is possible you have an issue with the revocation check but I would like you to make sure that the above is in place first.
Thanks.
-TP
Thanks for the response.
To be clear I am only seeing a name mismatch and revocation error if I assign a self signed cert to the session host as advised earlier in the thread by "Dharmesh Solanki", if I remove this and assign the 3rd party certificate I then
just get the revocation error , I have already ran the powershell to change the FQDN's but this has not resolved the issue although the RDP connection details now match the external url for RDWEB when looking at one of the remoteapp files. The workspace
ID still shows an internal name though inside this same file.
RD Gateway is already set to connect any resource, when connecting using remote app both names (RDCB/RDGateway) show as being correct and are contained within the same UCC certificate. I also already have a DNS entry for the Connection broker pointing to
the internal ip.
Do you know if the I need the internal name of the session host servers contained within the same UCC certificate seeing as they are different fqdn's than what I am using for external access ? I resigned the UCC certificate and included the internal name
of the session host server to see if this would help but for some reason I am still seeing the revocation error. I will check on a windows 8 client pc this evening to see if this gets any further as the majority of the testing has been done on windows 7 sp1
client pc's
Thanks

Problem with OSCP revocation checking

Similar Messages

Maybe you are looking for