How to avoid Delta CRL download errors on Windows Server 2008 with IIS7

Published Jan 24 2020 01:42 PM 134 Views
Microsoft

First published on TECHNET on Feb 24, 2008

If delta CRLs are hosted on a Windows Server 2008 server running Internet Information Server 7 (II7), the configuration of a request filter must be changed in the IIS7 configuration.

 

 

 

IIS7.0 does not allow URI’s that do not match upon double escaping. Delta CRLs fall into that category because of the plus sign in the filename.

 

 

 

To change the filter for the site that is hosting the CRLs and delta CRLs, perform the following command at a command line:

 

 

 

appcmd set config "Default Web Site/VDIR" -section:system.webServer/security/requestFiltering -allowDoubleEscaping:true

 

 

 

You have to replace VDIR with the name of the web site hosting the delta CRL, for example:

 

 

 

appcmd set config "Default Web Site/PKI" -section:system.webServer/security/requestFiltering -allowDoubleEscaping:true

 

 

 

To change the setting for the default Web site, use this command:

 

 

 

appcmd set config "Default Web Site" -section:system.webServer/security/requestFiltering -allowDoubleEscaping:true

 

 

 

For related information about the configuration of request filters in IIS7 is found on Microsoft TechNet.

%3CLINGO-SUB%20id%3D%22lingo-sub-1128401%22%20slang%3D%22en-US%22%3EHow%20to%20avoid%20Delta%20CRL%20download%20errors%20on%20Windows%20Server%202008%20with%20IIS7%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1128401%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSTRONG%3E%20First%20published%20on%20TECHNET%20on%20Feb%2024%2C%202008%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-fareast-font-family%3A%20Calibri%3B%20mso-fareast-language%3A%20EN-US%3B%20mso-ansi-language%3A%20DE%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%20mso-fareast-theme-font%3A%20minor-latin%3B%20mso-bidi-language%3A%20AR-SA%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-fareast-font-family%3A%20Calibri%3B%20mso-fareast-language%3A%20EN-US%3B%20mso-ansi-language%3A%20DE%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%20mso-fareast-theme-font%3A%20minor-latin%3B%20mso-bidi-language%3A%20AR-SA%3B%22%3E%20%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%22%3E%20If%20delta%20CRLs%20are%20hosted%20on%20a%20Windows%20Server%202008%20server%20running%20Internet%20Information%20Server%207%20(II7)%2C%20the%20configuration%20of%20a%20request%20filter%20must%20be%20changed%20in%20the%20IIS7%20configuration.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%22%3E%20IIS7.0%20does%20not%20allow%20URI%E2%80%99s%20that%20do%20not%20match%20upon%20double%20escaping.%20Delta%20CRLs%20fall%20into%20that%20category%20because%20of%20the%20plus%20sign%20in%20the%20filename.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%22%3E%20To%20change%20the%20filter%20for%20the%20site%20that%20is%20hosting%20the%20CRLs%20and%20delta%20CRLs%2C%20perform%20the%20following%20command%20at%20a%20command%20line%3A%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%23404040%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Courier%20New'%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-themecolor%3A%20text1%3B%20mso-themetint%3A%20191%3B%22%3E%20appcmd%20set%20config%20%22Default%20Web%20Site%2FVDIR%22%20-section%3Asystem.webServer%2Fsecurity%2FrequestFiltering%20-allowDoubleEscaping%3Atrue%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%22%3E%20You%20have%20to%20replace%20%3CI%3E%20VDIR%20%3C%2FI%3E%20with%20the%20name%20of%20the%20web%20site%20hosting%20the%20delta%20CRL%2C%20for%20example%3A%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%23404040%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Courier%20New'%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-themecolor%3A%20text1%3B%20mso-themetint%3A%20191%3B%22%3E%20appcmd%20set%20config%20%22Default%20Web%20Site%2FPKI%22%20-section%3Asystem.webServer%2Fsecurity%2FrequestFiltering%20-allowDoubleEscaping%3Atrue%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%22%3E%20To%20change%20the%20setting%20for%20the%20default%20Web%20site%2C%20use%20this%20command%3A%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%23404040%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Courier%20New'%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-themecolor%3A%20text1%3B%20mso-themetint%3A%20191%3B%22%3E%20appcmd%20set%20config%20%22Default%20Web%20Site%22%20-section%3Asystem.webServer%2Fsecurity%2FrequestFiltering%20-allowDoubleEscaping%3Atrue%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%20style%3D%22margin%3A%200cm%200cm%2010pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2010pt%3B%20color%3A%20%2331849b%3B%20line-height%3A%20115%25%3B%20font-family%3A%20'Lucida%20Sans%20Unicode'%2C'sans-serif'%3B%20mso-ansi-language%3A%20EN-US%3B%20mso-themecolor%3A%20accent5%3B%20mso-themeshade%3A%20191%3B%22%3E%20For%20related%20information%20about%20the%20%3CA%20href%3D%22http%3A%2F%2Ftechnet2.microsoft.com%2Fwindowsserver2008%2Fen%2Flibrary%2F86bb183f-a016-40ca-b9c3-bbb2f5c8a4b51033.mspx%3Fmfr%3Dtrue%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3E%20configuration%20of%20request%20filters%20in%20IIS7%20%3C%2FA%3E%20is%20found%20on%20Microsoft%20TechNet.%20%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1128401%22%20slang%3D%22en-US%22%3E%3CP%3EFirst%20published%20on%20TECHNET%20on%20Feb%2024%2C%202008%20If%20delta%20CRLs%20are%20hosted%20on%20a%20Windows%20Server%202008%20server%20running%20Internet%20Information%20Server%207%20(II7)%2C%20the%20configuration%20of%20a%20request%20filter%20must%20be%20changed%20in%20the%20IIS7%20configuration.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1128401%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ECarstenKinder%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Version history
Last update:
‎Feb 20 2020 02:45 PM
Updated by: