SSL Monitor

​

Functionality

• Detectors downloads SSL certificate and checks it for validity and trust.

• CA chain is valid
• SSL is not expired
• Signature is correct

• System CA trusts certificate (self-signed certificates are not trusted by default)
• Domain/Subdomain which SSL certificate to be checked.
• Cron expression in Quartz syntax (ex: 0 0 0/1 1/1 * ? * - every hour), frequency in milliseconds or expression (e.g. 1 hour)

​

Configuration

• Cron (cron, default: 10 min): Cron expression to check DNS See common configuration.
• Domain (domain, default: “): Domain to monitor
• Expiry Alert (expiry_alert, default: “): The date when to start alerting about expriration
• Severity (severity, default: -1): Severity See common configuration.