I get a warning in the new SSL certificate sensors in my network (not in the SSL security check sensors). What does it mean, and how can I fix it? These sensors are on a gateway and a web server.
When opening a certificate to view its details, there should be a property called "CRL distribution points", containing a URL pointing to the so-called revocation list. If this can't be performed, it could mean that the certificate has no CRL it points to, so the revocation cannot be checked. In this case you could simply click on the channel Revocation Status and change the Lookup field to "None".
In case the certificate contains a URL to check revocation status, the probe running the sensor (PRTG core server or remote probe) needs internet access in order to check the revocation status.
Disclaimer:
The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.
