Hello,

one of our ssl secority sensors can not check the status of the revocation. "Unable to check revocation status"

Use this query the proxy defined in the device settings? I see no traffic at the proxy server.

I enabled the logging funtion on disk.

Certificate Chain Info

-----------------------

Certificates in chain: 3

Expired certificates in chain: 0

Certificate chain reaches root: True

Certificate chain signatures valid: True

Seems good to me.

What could be the problem?

BR Christian

Article Comments

Hi there,

We rely on the underlying Windows to check the revocation status. If Windows is not configured to forward these requests to a proxy, then it might won't work.

Best regards.


Jun, 2019 - Permalink

Hello Dariusz,

the prtg-server is able to use a proxy (configured in IE).

But I see no connections at the proxy or at the firewalls.

In the Logs(Sensor) directory, I can see the certificates of the chain.

The files certificatechain.txt and data.txt are similar to other certificate sensors.


Jun, 2019 - Permalink

Hi there,

It's hard to say for us why it does not work. As mentioned, we totally rely on Windows here.

Could you add the sensor, for the same host, under a different probe? Does this work?

Best regards.


Jun, 2019 - Permalink

Hi,

unfortunately we have only one probe. I will set the lookup to non, to avoid the warnings/errors.

Currently I have no time to investigate this problem. So you can close this ticket.


Jun, 2019 - Permalink