Hi all,

Unlike most folks, I was able to publish my certificates and CRL's in LDAP
using Openca 1.0.2. My problem exists with check for it in LDAP. Using
PKIVIEW in Windows it mentions that it is "Unable to download" the CRL
from the LDAP CDP. It reports "OK" for the http one.

I used an ldap search command to check the existance of the CRL in LDAP
and that it was not expired. Here is the command I used:

./ldapsearch -x -h host -b "cn=Root CA,ou=Trustcenter,dc=domain,dc=com"
certificateRevocationList

I am also able to use IE to at least contact the LDAP server via this
method (unsure how to download CRL using this method):

ldap://host/cn=Root CA,ou=Trustcenter,dc=domain,dc=com

Any help appreciated!!!!

Dave