Is there a plugin that tests the expiration in the chain?

[henk_stobbe]

Hello,

Is there a plugin that also tests the expiration in the chain? I talked to a customer who had an expired intermediate certificate and then things fail!

KR Henk

[florent_duchate · Accepted solution]

Hello

which ssl extension are you using? There are 2 on the hub. The one I wrote specifically should deal with chains https://www.dynatrace.com/hub/detail/ssl-checker/?query=ssl+checker

[henk_stobbe]

Hi Florent,

Thanks for your reply, I am sorry to say that customer uses the check from the synthetic monitoring )-;

KR Henk

[Mike_L]

Sounds like it's time to migrate them 😊

[fstekelenburg]

the other one is https://www.dynatrace.com/hub/detail/advanced-ssl-certificate-check-for-dynatrace? Any pros/cons between them two?

I like the fact in the one you wrote that can also rely on the OneAgent to automatically detect domains “seen” inside services. The only thing that there is mentioned that several configuration changes are required outside the extension, one of which cannot be carried out by non-Dynatrace staff. For experienced users only

[Mike_L]

Hey Frans, long time no see!
They cover very similar use cases but in essence one is more focused on synthetic and one on OA discovery. Other than that one is open source and supported by a partner and one is supported by Dynatrace.