Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a period check on crontab that check if the certificate is expired or not #2

Closed
giosueDelgado opened this issue Jan 13, 2024 · 0 comments 路 Fixed by #3
Closed

Add a period check on crontab that check if the certificate is expired or not #2

giosueDelgado opened this issue Jan 13, 2024 · 0 comments 路 Fixed by #3
Assignees
Labels
enhancement New features or requests for enhancements.

Comments

@giosueDelgado
Copy link
Contributor

Describe the feature. 馃摑

We need to implement a system to periodically check if any SSL/TLS certificates managed by our server (originated from internal requirements) are nearing expiration or have already expired. This feature is essential for maintaining the integrity and security of our web services, as it ensures continuous HTTPS availability.

Describe the solution you'd like 馃挕

The ideal solution involves setting up a cron job that runs a script at regular intervals (e.g., daily). This script should:

  • Enumerate all SSL/TLS certificates managed by the server.
  • Check each certificate's expiry date.
  • Alert the system administrators if any certificate is nearing expiry or has already expired, allowing for timely renewal.

Describe alternatives you've considered 馃攧

An alternative could be the use of external monitoring tools that track certificate validity. However, integrating an internal solution directly within our server environment provides more control and reduces dependency on third-party services.

Additional context 馃摎

This feature is particularly important for avoiding service interruptions and potential security risks associated with expired certificates. Implementing this will enhance our proactive maintenance capabilities.

Validation

This section is to be updated with suggestions for testing this issue. Key validation points include:

  • Ensuring the script accurately detects the expiry status of all certificates.
  • Verifying that the cron job runs as scheduled without causing any disruptions.
  • Confirming that appropriate alerts/notifications are generated and sent to system administrators.
@giosueDelgado giosueDelgado added the enhancement New features or requests for enhancements. label Jan 13, 2024
@giosueDelgado giosueDelgado self-assigned this Jan 13, 2024
@giosueDelgado giosueDelgado linked a pull request Jan 13, 2024 that will close this issue
12 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New features or requests for enhancements.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant