topic Re: Monitor SSL certificate expiry and generate alert in Open Q&A

Monitor SSL certificate expiry and generate alert

dario_chini — Thu, 29 Aug 2019 14:45:37 GMT

We need monitor SSL certificate expiry and we want to get the alert X-days before it expires and just if it is expired.

There are same different implementation, for example :

create specific synthetic monitor for SSL certificate expiry check
create an api in post-script execution to get expire date, and the user can generate fail logic

Re: Monitor SSL certificate expiry and generate alert

skrystosik — Thu, 29 Aug 2019 17:42:58 GMT

In general you will have to create custom metric that will present certificate validation time as number of days. In such way you will be able to create threshold on such metric. But to get such value I think you will have to create ActiveGate plugin that will call your hosts every minute (default behavior), fetch date time of certificate expiration and than calculate number of days. After this operation such data should be send to dynatrace as custom metric with dimensions for all host separately. This will give you option for creating threshold and event for such metric,

Sebastian

Re: Monitor SSL certificate expiry and generate alert

Julius_Loman — Sun, 12 Jan 2020 21:37:39 GMT

I've written a OneAgent plugin for SSL/TLS certificate expiration check (also does notification in advance). If you need to check certificates locally for any process running on a host monitored by oneagent.

If you are interested, you can download it from https://github.com/juliusloman/dynatrace-oneagent-plugin-sslcertcheck.

Re: Monitor SSL certificate expiry and generate alert

malvarado — Tue, 08 Dec 2020 15:31:54 GMT

Hello! I have installed the plugin but is fails with this message: Error: No module named 'asn1crypto'. What can we do?