Internal Errigal Collaboration Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

=====SSLCertExpiring=====

**Level:** minor 


**Purpose:**
The alert checks the SSL cert for a URL and reports if the cert will expire within 90 days.

**Scenario:** The SSL Certificate for the website will expire in 90 days.

**Resolution:**
Renew the SSL. All our websites that end in *.errigal.com use a GoDaddy wildcard cert. Check [[http://wiki.err/doku.php?id=databaseandnetworkmanagement:ssl_renewal|this]] wiki article for guidance. A time and date will need to be arranged for customer environments as the applications will need to be restarted. Renew the certificate and follow a cert renewal MOP to deploy the new cert.

We have an ansible playbook that will update the certs and restart httpd. Ensure that the new cert exists in the files folder under the right customer for the role that is used by the below playbook. All apps should use http internally, so app restart should not be necessary.
The playbook can be found in this repo: https://bitbucket.org/errigal/deployment-playbooks/src/master/reconfigure-ssl.yml

**Manual Action Steps:**
Only way to resolve this is to renew the SSL certificate.

**Auto Clear:**
When the cert is renewed and the expiry date is greater than 90 days.

Sidebar

Internal Errigal Collaboration Wiki

User Tools

Site Tools

Page Tools