Forum Discussion

Rodger_Keesee's avatar
Rodger_Keesee
9 years ago

SSL Cert expiration alerting

Some other monitoring tools provide SSL certificate monitoring to alert for expiring certs. Really wish LogicMonitor had this. +1 if I could use a collector to monitor for private SSL certs that ar...
answered
ssl
mnagel's avatar
mnagel
Icon for Professor rankProfessor
8 years ago

Since this does not seem to be getting much attention and it is a critical check to have, I am working from examples that use javax.net.ssl.* to cook up my own check that will allow manual instance FQDN/IP/port specifications (needed for SNI since it is not possible to discover all the certificates on an IP in general) and will workaround the continued lack of "Bottom N" graphing by assigning a "lifetime used" score to the certificate based on expiration, so <= 0 will be 100% used and > 0 will be smaller.  This will allow identification of the smallest lifetime certificates within the LM graphing framework.   It used to be possible to view the certificates expiring soon by setting a graph maximum value, but that no longer works, sadly.

Once I get this working, will update....

Thanks,

Mark