Control ID: CA-OPS-006
Control Name: CDP/CRL URL Reachability Validation
Severity: Medium
Status: Failure
Certificate Authority: Securetron-Lab-ROOT-CA
Execution Time: 2025-10-15 22:42:49
Duration: 00:00:00.1998754

Expected Result:
HTTP-based CDP/CRL URLs with qualifying flags should be accessible

Evidence:
CDP/CRL Configuration Analysis for Securetron-Lab-ROOT-CA:
  Total CDP/CRL entries found: 7
  HTTP CDP/CRL URLs with qualifying flags: 3

Reachability Test Results:
URL: http://web.securetron-lab.local/<CAName><CRLNameSuffix><DeltaCRLAllowed>.crl
  Status: UNREACHABLE
  Error: The requested name is valid, but no data of the requested type was found. (web.securetron-lab.local:80)
  Flags: AddToCrlIdp, AddToFreshestCrl, AddToCertificateCdp
URL: http://localhost/Securetron-Lab-ROOT-CA.crl
  Status: REACHABLE
  HTTP Status: 200 OK
  Flags: AddToCrlIdp, AddToFreshestCrl, AddToCertificateCdp
URL: http://192.168.205.128/Securetron-Lab-ROOT-CA.crl
  Status: REACHABLE
  HTTP Status: 200 OK
  Flags: AddToCrlIdp, AddToFreshestCrl, AddToCertificateCdp

Validation Rule (from parameters.json):
  CDP/CRL Reachability Validation Required: True
  All URLs Reachable: NO
  Overall: NON-COMPLIANT


Recommendation:
Fix accessibility issues for HTTP CDP/CRL URLs or update CDP/CRL configuration.
