Differences

This shows you the differences between two versions of the page.

--- resolution_area:prometheus_resolutions:res-p1501 [2021/06/21 11:00] – external edit 127.0.0.1
+++ resolution_area:prometheus_resolutions:res-p1501 [2021/08/20 22:33] (current) – 10.91.120.28
@@ Line 1: / Line 1: @@
+=====SSLCertExpiring=====
+**Level:** minor
+**Purpose:**
+The alert checks the SSL cert for a URL and reports if the cert will expire within 90 days.
+**Scenario:** The SSL Certificate for the website will expire in 90 days.
+**Resolution:**
+Renew the SSL. All our websites that end in *.errigal.com use a GoDaddy wildcard cert. Check [[http://wiki.err/doku.php?id=databaseandnetworkmanagement:ssl_renewal|this]] wiki article for guidance. A time and date will need to be arranged for customer environments as the applications will need to be restarted. Renew the certificate and follow a cert renewal MOP to deploy the new cert.
+We have an ansible playbook that will update the certs and restart httpd. Ensure that the new cert exists in the files folder under the right customer for the role that is used by the below playbook. All apps should use http internally, so app restart should not be necessary.
+The playbook can be found in this repo: https://bitbucket.org/errigal/deployment-playbooks/src/master/reconfigure-ssl.yml
+**Manual Action Steps:**
+Only way to resolve this is to renew the SSL certificate.
+**Auto Clear:**
+When the cert is renewed and the expiry date is greater than 90 days.

Internal Errigal Collaboration Wiki