Monitor SSL certificate expiry and generate alert

[dario_chini]

We need monitor SSL certificate expiry and we want to get the alert X-days before it expires and just if it is expired.

There are same different implementation, for example :

• create specific synthetic monitor for SSL certificate expiry check
• create an api in post-script execution to get expire date, and the user can generate fail logic

[skrystosik · Accepted solution]

In general you will have to create custom metric that will present certificate validation time as number of days. In such way you will be able to create threshold on such metric. But to get such value I think you will have to create ActiveGate plugin that will call your hosts every minute (default behavior), fetch date time of certificate expiration and than calculate number of days. After this operation such data should be send to dynatrace as custom metric with dimensions for all host separately. This will give you option for creating threshold and event for such metric,

Sebastian

[Julius_Loman · Accepted solution]

I've written a OneAgent plugin for SSL/TLS certificate expiration check (also does notification in advance). If you need to check certificates locally for any process running on a host monitored by oneagent.

If you are interested, you can download it from https://github.com/juliusloman/dynatrace-oneagent-plugin-sslcertcheck.

[malvarado]

Hello! I have installed the plugin but is fails with this message: Error: No module named 'asn1crypto'. What can we do?