CB Response: Does the sensor verify if a certificate is expired during checkin?

[#1]

Environment

• CB Response Server: All Versions
• CB Response Sensor: All Versions

Question

Will a sensor stop checking into the server if the certificate is expired? 

Answer

• By default, the sensor does not check the certificate expiration date when communicating with the server. 
• To enable date checking
  1. Edit /etc/cb/nginx/conf.d/includes/cb.server.sensor
  2. Change ssl_verify_client to on

     • ssl_verify_client on;