Error 'HTTP/1.1 403 Forbidden' when trying to get a key
2 years ago
Originally Published: 2008-04-22
Article Number
000062177
Applies To
RSA Key Manager Client
Issue
Error "HTTP/1.1 403 Forbidden" when trying to get a key
Invalid CRL Distribution Point in RKM client certificate will return an HTTP/1.1 403 Forbidden error message
Cause
The client certificate contains a CRL Distribution Point extension and that CRL is not accesible.
Resolution
If your webserver is configured to validate all client certificates, then the CRL defined by the "CRL Distribution Point" extension must be accessible and valid (up to date).

To correct the issue, you can

1. Disable client certificate validation in your webserver. Consult your webserver's documentation to change the setting. If you are using IIS, you can follow this solution : a39779 - How to turn on or off CRL checking on IIS 6.0
or
2. Reissue your client certificate so that there is no CRL DP extension.