Differences

This shows you the differences between two versions of the page.

--- resolution_area:prometheus_resolutions:res-p1504 [2021/06/24 14:41] – btobin
+++ resolution_area:prometheus_resolutions:res-p1504 [2021/07/05 15:16] (current) – wflaherty
@@ Line 1: / Line 1: @@
+=====LetsEncryptSSLCertExpiringSoon=====
+**Level:** __Major__
+**Purpose:**
+The alert checks the SSL cert for a URL and reports if the cert will expire within 90 days.
+**Scenario:**
+The SSL Certificate for the <server>  will expire in 30 days. Monitor it to verify it auto renews properly
+**Resolution:**
+You shouldn't have to do anything for this
+Renew the SSL. All our websites that end in *.errigal.com use a GoDaddy wildcard cert. Check [[http://wiki.err/doku.php?id=databaseandnetworkmanagement:ssl_renewal|this]] wiki article for guidance. A time and date will need to be arranged for customer environments as the applications will need to be restarted. Renew the certificate and follow a cert renewal MOP to deploy the new cert.
+**Manual Action Steps:**
+Only way to resolve this is to renew the SSL certificate.
+For LetsEncrypt this is a very easy process as there is program to do it for you.
+There is a guide here
+https://www.cyberciti.biz/faq/how-to-forcefully-renew-lets-encrypt-certificate/
+Generally, we aren't using LetsEncrypt as much any more, so this alert likely won't be needed.
+**Auto Clear:**
+When the cert is renewed and the expiry date is greater than 90 days.

Internal Errigal Collaboration Wiki