User Tools

Site Tools


resolution_area:prometheus_resolutions:res-p1504

This is an old revision of the document!


LetsEncryptSSLCertExpiringSoon

Level: Major :!:

Purpose: The alert checks the SSL cert for a URL and reports if the cert will expire within 90 days.

Scenario: The SSL Certificate for the <server> will expire in 30 days. Monitor it to verify it auto renews properly

Resolution: You shouldn't have to do anything for this Renew the SSL. All our websites that end in *.errigal.com use a GoDaddy wildcard cert. Check this wiki article for guidance. A time and date will need to be arranged for customer environments as the applications will need to be restarted. Renew the certificate and follow a cert renewal MOP to deploy the new cert.

Manual Action Steps: Only way to resolve this is to renew the SSL certificate.

For LetsEncrypt this is a very easy process as there is program to do it for you. There is a guide here https://www.cyberciti.biz/faq/how-to-forcefully-renew-lets-encrypt-certificate/

Generally, we aren't using LetsEncrypt as much any more, so this alert likely won't be needed.

Auto Clear: When the cert is renewed and the expiry date is greater than 90 days.

resolution_area/prometheus_resolutions/res-p1504.1625494572.txt.gz · Last modified: 2021/07/05 15:16 by wflaherty