Certificate expiration

[keerthi.seetharaman]

Hello Team,

Good day.

Is there any plugin available which can check and create alarm if an application certificate expires. The alarm should be generated prior to 2 months of certificate expiration date.

[tgriep]

Can you provide more details on what application has the certificate?

[keerthi.seetharaman]

WebSEAL details that should be placed for monitoring as part of AEM6.2 upgrade of CH country

ID Go live Priority Go Live Phase HOST HOSTGROUP IP port Monitor name Check type Function Check category Severity Relationship type Partner(s) Warning Threshold Critical Threshold Contact Message Solution
1 viepwsepe11 Webseal_SSO 172.28.37.102 443 aem6.ch-FE-cert-check Certificate Expiration Certificate Expiration Application High 30 days before expiration 15 days before or when expired or not available
[email protected] WARNING - Certificate '<certificate>' expires in xx day(s), CRITICAL - certificate expired or CRITICAL - connection refused If certificate expired replace the designated certificate asap, if down check connectivity
1 viepwsepe12 Webseal_SSO 172.28.37.103 443 aem6.ch-FE-cert-check Certificate Expiration Certificate Expiration Application High 30 days before expiration 15 days before or when expired or not available [email protected] WARNING - Certificate '<certificate>' expires in xx day(s), CRITICAL - certificate expired or CRITICAL - connection refused If certificate expired replace the designated certificate asap, if down check connectivity
1 viepwsepe11 Webseal_SSO 172.28.37.104 443 aem6.ch-FE-cert-check Certificate Expiration Certificate Expiration Application High 30 days before expiration 15 days before or when expired or not available [email protected] WARNING - Certificate '<certificate>' expires in xx day(s), CRITICAL - certificate expired or CRITICAL - connection refused If certificate expired replace the designated certificate asap, if down check connectivity
1 viepwsepe12 Webseal_SSO 172.28.37.105 443 aem6.ch-FE-cert-check Certificate Expiration Certificate Expiration Application High 30 days before expiration 15 days before or when expired or not available [email protected] WARNING - Certificate '<certificate>' expires in xx day(s), CRITICAL - certificate expired or CRITICAL - connection refused If certificate expired replace the designated certificate asap, if down check connectivity

This was the request so we are not sure about whether it is for application or server

[npolovenko]

Hello, @keerthi.seetharaman. I'm not quite familiar with WebSEAL servers but we do have a few ssl_expiration checks on nagios exchange.

Here's some, but you may be able to find more on https://exchange.nagios.org
https://exchange.nagios.org/directory/P ... te/details
https://exchange.nagios.org/directory/P ... rt/details
https://exchange.nagios.org/directory/T ... on/details

[keerthi.seetharaman]

Hello Team,

Can you please provide with a specific link else please let us know how to schedule a webex so that we can explain briefly.

[tgriep]

If you want to check the SSL Certificate, you can use the following example which will give you a warning at 30 days to go and a critical at 15 days, would that work for you?

Code: Select all

/usr/local/nagios/libexec/check_http -H 172.28.37.102  -C 30,15

You could use the Website Wizard to setup the commands for you.

[keerthi.seetharaman]

Hello Team,

Please close this case..

Regards,
Keerthi Prashanth S