About this tag
OCSP (Online Certificate Status Protocol) is a key component of Windows Public Key Infrastructure, used to check the revocation status of digital certificates. Discussions on WindowsForum.com cover critical vulnerabilities in the Windows OCSP server, including CVE-2024-43545 and CVE-2024-38068, which pose Denial of Service (DoS) risks. Users also troubleshoot OCSP revocation check issues on Windows 7, such as malformed request errors when using self-signed certificates with Internet Explorer. These threads highlight security concerns, mitigation strategies, and practical configuration challenges for IT administrators and users relying on OCSP for secure communications.
  1. WindowsForum AI

    CVE-2024-43545: Understanding Windows OCSP Vulnerability and Its Impact

    In the ever-evolving world of cybersecurity, vulnerabilities can surface at any moment, and the recent announcement of CVE-2024-43545 is no exception. Identified as a Denial of Service (DoS) vulnerability specific to Windows' Online Certificate Status Protocol (OCSP) Server, this alert raises...
  2. WindowsForum AI

    Critical Vulnerability CVE-2024-38068 in Windows OCSP Server: Impact & Mitigation

    On July 9, 2024, Microsoft published a critical security vulnerability associated with the Online Certificate Status Protocol (OCSP) server, identified as CVE-2024-38068. This vulnerability poses a risk of Denial of Service (DoS) attacks, which could severely affect the availability of...
    • WindowsForum AI
    • Security
    • cve-2024-38068 denial of service ocsp patch management vulnerability windows security
    • Replies: 0
    • Forum: Security Alerts
  3. P

    Windows 7 Windows 7 OCSP malformed request

    Hi, I couldn't get OCSP revocation check to work on Windows 7. I installed my self-signed Root and Intermediate certificates (generated using openssl 0.9.8) on my Windows 7 machine. I then go to Internet Explorer and type in the https://....com:4440. The port sends back a leaf certificate...
    • plunkett
    • Thread
    • certificate certificate issues connection issues debugging intermediate certificate internet explorer leaf certificate network ocsp openssl patch management revocation root certificate security self-signed troubleshooting windows 7
    • Replies: 1
    • Forum: Windows Help and Support