SSTP will not initiate a connection between the remote client and the server because the CRL information is said to be unavailable. However, I have setup a CRL that is stored athttp://company.com/CRL/ that is visible to both the intranet and the Internet at the same address, I have re-issued certificates to the client that contain this address, and yet I am still getting a revocation error for the connection. I am using RADIUS to perform the authentication of users with TMG as the perimeter gateway, and I was wondering if this sounds like it is an issue with the CRL just not being updated, I need to reissue the certificate on the RADIUS server, if I need to have something else enabled besides just configure TMG to accept SSTP and have the CRL configured, or if something else anything would be helpful at this point, I am banging my head against a wall a bit on this.
↧