topic Re: Is there a plugin that tests the expiration in the chain? in Extensions

Is there a plugin that tests the expiration in the chain?

henk_stobbe — Wed, 28 Sep 2022 08:43:40 GMT

Hello,

Is there a plugin that also tests the expiration in the chain? I talked to a customer who had an expired intermediate certificate and then things fail!

KR Henk

Re: Is there a plugin that tests the expiration in the chain?

florent_duchate — Wed, 28 Sep 2022 08:59:15 GMT

Hello

which ssl extension are you using? There are 2 on the hub. The one I wrote specifically should deal with chains https://www.dynatrace.com/hub/detail/ssl-checker/?query=ssl+checker

Re: Is there a plugin that tests the expiration in the chain?

henk_stobbe — Wed, 28 Sep 2022 09:04:26 GMT

Hi Florent,

Thanks for your reply, I am sorry to say that customer uses the check from the synthetic monitoring )-;

KR Henk

Re: Is there a plugin that tests the expiration in the chain?

Mike_L — Wed, 28 Sep 2022 09:06:49 GMT

Sounds like it's time to migrate them 😊

Re: Is there a plugin that tests the expiration in the chain?

fstekelenburg — Wed, 28 Sep 2022 12:08:22 GMT

the other one is https://www.dynatrace.com/hub/detail/advanced-ssl-certificate-check-for-dynatrace? Any pros/cons between them two?

I like the fact in the one you wrote that can also rely on the OneAgent to automatically detect domains “seen” inside services. The only thing that there is mentioned that several configuration changes are required outside the extension, one of which cannot be carried out by non-Dynatrace staff. For experienced users only

Re: Is there a plugin that tests the expiration in the chain?

Mike_L — Wed, 28 Sep 2022 12:19:15 GMT

Hey Frans, long time no see!
They cover very similar use cases but in essence one is more focused on synthetic and one on OA discovery. Other than that one is open source and supported by a partner and one is supported by Dynatrace.