Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

A while back, we set up an internal microsoft certificate server to issue certificates to our internal servers. However, when a certificate expires, we do not realize it until we start getting errors in our applications.

Is there a way to set up the certificate services to generate e-mail notifications when certificates are about to expire?

share|improve this question

2 Answers 2

For our external servers we use AlertFox: http://wiki.alertfox.com/FAQ#Q:_How_can_I_monitor_HTTPS_.28SSL.29-encrypted_websites.3F

I think you can recreate this setup internally with the free iMacros Firefox addon via its command line interface. Basically you create a macro that browses your website, and if the certificate is expired it will trigger an error message. That can also be combined with Nagios etc.

share|improve this answer

I'm not familiar with that software, but if you can't find a built in method for monitoring certificate expiry, look into check-expire: http://novosial.org/openssl/check-expire/. It's for a Unix environment, so if you lack any compatible OS installs, you could try looking into running it under Cygwin or MinGW.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.