Let assume that I have a Linux based server running apache or tomcat with a web server certificate created by a trusted authority. The certificate has embedded distribution point of the crl. The question is as follows: Whenever my server communicates via ssl with another entity(server, user, etc) , does it relying on a valid crl or trust chain is enough? (default configuration)
Edit: The situation is that my organization consist of windows environment and Linux environment. The organization utilize Microsoft CA for certificates of servers and client which both Windows and Linux use. There is a public server hosting the crl files. Most of the Linux environment consist apache servers and db servers, communicating via ssl.
The question is what would happen to the Linux environment if the crl server would gone offline. Would the Linux server able to communicate by verify the chain trust or would it fail to verify without crl available. The question is kind of abstract because I have many kinds of servers in that environment, however I'd like to know the general situation in such scenario.
Second Edit: I'd like to mention that in our Linux environment, we use OpenSSL for creating the CSR's and installing the certificates.