23.0 Certificate Revocation List Implementation in an Existing Sentinel Installation

Mutual SSL Authentication in Sentinel

Sentinel is used for standardizing security protocols within networks, servers, computers, and logical designs to enhance overall security.

Sentinel supports mutual SSL Authentication to provide a local cache of revocation data by implementing the Certificate Revocation List (CRL) feature. CRL helps in blocking a compromised client even when Sentinel is not connected to the Internet to validate the certificate credentials of a revoked client.

CRL is a list of digital certificates that were revoked by the issuing Certificate Authority (CA) before their scheduled expiration date and must no longer be trusted. CRLs are a type of blacklist and are used by various endpoints, including Web browsers, to verify whether a certificate is valid and trustworthy.

This chapter provides information about the following: