I'm trying to configure an Online Responder (OCSP Responder) for a Windows-based PKI (2008 R2) and I can't for the life of me get the OCSP service to validate when I check it in the Enterprise PKI MMC.
The CA is up and working, the CDP extensions are correctly created, the CRL LDAP and HTTP locations are working, but for some reason the OCSP Responder is not able to verify. I ran a packet capture and it looks like the Enterprise PKI MMC is sending the Get request to the IIS Server, but the server is returning a 404 for the GET request.
It almost seems like the IIS server doesn't know how to pickup or return a response for the OCSP request.
As you might have guessed, I'm pretty new to IIS and OCSP. Please let me know if I can provide any additional clarifying information.
