---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Verify certificate revocation

# Verify certificate revocation {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
The com.glide.communications.httpclient.verify_revoked_certificate property checks certificate revocation during the Transport Layer Security (TLS) handshake to ensure that security checks aren't
bypassed.
If the com.glide.communications.httpclient.verify_revoked_certificate property isn't configured to the recommended value of true, certificate revocation checks will be skipped during the
TLS handshake.

This creates a critical security gap, potentially allowing an attacker to use a revoked certificate undetected and compromise the integrity of the Public Key Infrastructure (PKI) and the trust model that underpins secure web communications.

1. Navigate to /sys_properties_list.do on the instance.
2. Ensure the com.glide.communications.httpclient.verify_revoked_certificate property doesn't exist in the sys_properties table or is set to true.

## More information {#sc-verify-certificate-revocation__section_qhx_1b1_xwb}

{#sc-verify-certificate-revocation__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | com.glide.communications.httpclient.verify_revoked_certificate |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Default value | true |
| Recommended value | true |
| Default value | true |
| Category | [Communications](https://www.servicenow.com/docs/Ol4HTvWwwFO1g_KjaK_8RQ "This control ensures proper encryption using strong algorithms and ciphers. This includes ensuring the recommended version of TLS is used for client connectivity, use of strong cipher suites, use of trusted and signed certificates, ensuring connections are encrypted between components and logging of connection failures.") |
| Security risk | * Severity score: 6.5 * CVSS score: Medium * Security risk details: Not setting the com.glide.communications.httpclient.verify_revoked_certificate property to the recommended value of true, creates a critical security gap, potentially allowing an attacker to use a revoked certificate undetected and compromise the integrity of the Public Key Infrastructure (PKI) and the trust model that underpins secure web communications. {#sc-verify-certificate-revocation__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| Functional impact | When the com.glide.communications.httpclient.verify_revoked_certificate is set to true, every outbound HTTP request over TLS has its certificate checked for revocation using OCSP or CRL, as governed by the other properties in this family. When this property is set to false, no revocation checking is performed at all for outbound TLS connections, regardless of how the other certificate-revocation properties are configured. |
[ ]

{#sc-verify-certificate-revocation__table_ajc_b43_3kb}