Control ID: CA-OPS-006
Control Name: CDP/CRL URL Reachability Validation
Severity: Medium
Status: Failure
Certificate Authority: securetron-lab-ISSUINGCA
Execution Time: 2025-10-15 22:43:13
Duration: 00:00:00.0217419

Expected Result:
HTTP-based CDP/CRL URLs with qualifying flags should be accessible

Evidence:
CDP/CRL Configuration Analysis for securetron-lab-ISSUINGCA:
  Total CDP/CRL entries found: 7
  HTTP CDP/CRL URLs with qualifying flags: 3

Reachability Test Results:
URL: http://web.securetron-lab.local/<CAName><CRLNameSuffix><DeltaCRLAllowed>.crl
  Status: UNREACHABLE
  Error: The requested name is valid, but no data of the requested type was found. (web.securetron-lab.local:80)
  Flags: AddToCrlIdp, AddToFreshestCrl, AddToCertificateCdp
URL: http://localhost/securetron-lab-ISSUINGCA.crl
  Status: UNREACHABLE
  HTTP Status: 404 NotFound
  Flags: AddToCrlIdp, AddToFreshestCrl, AddToCertificateCdp
URL: http://192.168.205.128/securetron-lab-ISSUINGCA.crl
  Status: UNREACHABLE
  HTTP Status: 404 NotFound
  Flags: AddToCrlIdp, AddToFreshestCrl, AddToCertificateCdp

Validation Rule (from parameters.json):
  CDP/CRL Reachability Validation Required: True
  All URLs Reachable: NO
  Overall: NON-COMPLIANT


Recommendation:
Fix accessibility issues for HTTP CDP/CRL URLs or update CDP/CRL configuration.
