Environment
- CB Defense Sensor: 3.3 and Higher
Question
Why Are Godaddy's OCSP And CRL Domains Required When Installing A 3.3 + Sensor?
Answer
Beginning with version 3.3.x.x, the Sensor utilizes WinSSL to perform an online CRL validation check via GoDaddy URLs (crl.godaddy.com and ocsp.godaddy.com)
Additional Notes
- If a proxy is in place, please leverage one of four workarounds to allow CRL traffic as noted here
- If those workaround are not possible or do not resolve the issue, please open a support case
Related Content