We have installed Linux NRPE agent with SSL certificate issue by Windows CA server. However, it has been observed that if the certificate is revoked from Windows CA server the communication between Linux NRPE and Nagios server does not stops. In my opnion , It's a security violation. There is no parameter in NRPE to check certificate revocation list. It is possible to introduce a parameter to check CRL issued by CA server.
We have installed Linux NRPE agent with SSL certificate issue by Windows CA server. However, it has been observed that if the certificate is revoked from Windows CA server the communication between Linux NRPE and Nagios server does not stops. In my opnion , It's a security violation. There is no parameter in NRPE to check certificate revocation list. It is possible to introduce a parameter to check CRL issued by CA server.