News for hackers. Stuff that matters.

A comment on index.docker.io was serving an expired certificate.

Re:index.docker.io was serving an expired certificate by WestCoastJustin on Saturday March 21, 2015 @12:37AM (#9241866)
For anyone interested. If you are running Nagios/Sensu, then I highly suggest using one of the ssl check plugins [1, 2, 3], which will give you a heads up about these types of these before they happen. Then the onus is not on you to check some calendar/spreadsheet for expiring certs. Same goes for domains [4, 5]. When you are looking after tons of services, ssl certs, and domains, it is inevitable that things will slip through the cracks unless you have some type of monitoring keeping tabs on it for you.

[1] http://exchange.nagios.org/directory/Plugins/Network-Protoco...

[2] http://exchange.nagios.org/directory/Plugins/Network-Protoco...

[3] https://github.com/sensu/sensu-community-plugins/tree/master...

[4] http://exchange.nagios.org/directory/Plugins/Internet-Domain...

[5] https://github.com/sensu/sensu-community-plugins/tree/master...

[ Parent | on HN ]
Re:index.docker.io was serving an expired certificate by ams6110 on Saturday March 21, 2015 @12:44AM (#9241881)
Every CA I've ever used sends reminder emails. The problem is they are probably going to some un-read administrative email address.
[ Parent | on HN ]
Re:index.docker.io was serving an expired certificate by RKearney on Saturday March 21, 2015 @01:26AM (#9241944)
I can't speak to what certificate was in place before, but now there seems to be a wildcard certificate installed that isn't expired.

If the old certificate was also a wildcard certificate, it stands to reason that even if the CA sent a reminder email, this particular front end could have been overlooked.

[ Parent | on HN ]
Re:index.docker.io was serving an expired certificate by DougN7 on Saturday March 21, 2015 @01:03PM (#9243329)
On Windows (if you're not using Nagios), PA Server Monitor can do this for you.

http://www.poweradmin.com/help/sm_5_7/monitor_web_page.aspx

There really is no reason to be surprised by an expiring cert any more.

[ Parent | on HN ]