Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

SSL Certificate Monitoring Widget.

Attempting to monitor ssl certificates and display as a widget. Nothing appears with the SWSQL statement I configured. Has anyone successfully accomplished this? I have used some statements posted here, but they don't seem to show any nodes monitored. Any suggestions would be appreciated.

Find more posts tagged with

Accepted answers

All comments

Hinsy_Heimdall

This is currently working for my environment. The main thing is that you need to have the SSL Cert SAM functioning first. The widget just needs to reference the active SAM monitor(s) that are in effect

SELECT
C.Application.Node.Caption
,  C.ComponentName
, C.UserDescription
, C.CurrentStatistics.ComponentStatisticData as [Days Until Expiration]
, CONCAT(Year(AddDay(C.CurrentStatistics.ComponentStatisticData, GetDate())), '/', Month(AddDay(C.CurrentStatistics.ComponentStatisticData, GetDate())), '/' , Day(AddDay(C.CurrentStatistics.ComponentStatisticData, GetDate()))) as [Expiration Y/M/D]
, C.StatusLED
, C.Status
, C.StatusDescription
, C.Application.DisplayName AS [Application Name]
, C.DetailsUrl
FROM Orion.APM.Component C
WHERE c.Application.DisplayName LIKE '%ssl%'

bax02201

Thank you. Yes, the SAM functionality is working. I'll give it a shot and report back.

soheilamiri

hi
You can also check this SAM module then develop a dynamic dashboard that monitors the proximity of certificate expiration dates.

you can also check this topic

aksh14

@Hinsy_Heimdall I am looking for options to get Subject and Issuer details to be displayed in Widget.

adam.beedell

I've got one which does SAN, but not issuer, you might need to edit some script for that last one

Hinsy_Heimdall

@aksh14 @adam.beedell If you need to pull in more than certificate validaity using the OoB SSL Cert monitor, or the downloadable SAN SSL Monitor from thwack resources (quick google), you'll need to update the script itself to pull in those properties. If you have a functioning query that pulls in this info, the easy way for you to populate solarwinds with this is to have it dump the scripts findings into a log file and have it overwrite each time it runs. Then, use SolarWinds to read the log file and convert the lines data into mutliplestatisticdata. You can have 10 different messages/statistics for each component monitor in solarwinds, so you should be able to cover all items for each SSL cert in one monitor. The fun part for you will just be building the script to query all of those details and have it output them into a readable log file.

If you have a functioning script that pulls all of your requisite data:
Here's a small portion of a script I use to a log file for another issue. If you can get the script to output the info you want into a log file, solarwinds can pull all of it into a usable

This is using the linux component monitor. script argument lgoes like: sudo bash ${SCRIPT} logfilename.txt

just replace 'logfilename.txt' with your log file

#! /bin/bash

FILENAME=$1

DIR=''

FILEPATH="$DIR/$FILENAME"

if [ ! -f "$FILEPATH" ]; then
    echo "Message.0: $FILEPATH does not exist"
    echo "Statistic.0: 9000"
    exit 2
fi

INDEX=0

while IFS= read -r line
do
    SERVER=`echo "$line" | awk '{print $1}'`
    COUNT=`echo "$line" | awk '{print $3}'`
    echo "Message.$INDEX: $SERVER"
    echo "Statistic.$INDEX: $COUNT"
    ((INDEX++))
done < "$FILEPATH"

exit 0

Hinsy_Heimdall

@aksh14 Found another post that listed a ps script that in its current state should pull the issuer and log it as a statistic of the monitor in the database. Then you can use the multistatisticsdata table to call the value. Looks like you can repurpose it to grab and log whatever you need from the certificate query. Hope this helps! Follow the link and give them a thumbs up too if it worked.

[mention:c92276d579514ef9a994a6d8e4d64d86:fb5d84b10a5745448a7a45dafc1faa43]

$PORT=$args[1]

$computername = $args[0]

$tcpsocket = New-Object Net.Sockets.TcpClient($computername , $PORT)

#test if the socket got connected

if(!$tcpsocket)

{

    Write-host "Message.Issuer: Error Opening Connection: $port on $computername Unreachable"

    Write-Host "Statistic.Issuer: 0"

    exit 1

}

else

{

    #Socket Got connected get the tcp stream ready to read the certificate

    write-host "Successfully Connected to $computername on $port" -ForegroundColor Green -BackgroundColor Black

    $tcpstream = $tcpsocket.GetStream()

    Write-host "Reading SSL Certificate...." -ForegroundColor Yellow -BackgroundColor Black

    #Create an SSL Connection

    $Callback = { param($sender, $cert, $chain, $errors) return $true }

    $sslStream = New-Object System.Net.Security.SslStream($tcpstream,$false,$Callback)

    #Force the SSL Connection to send us the certificate

    $sslStream.AuthenticateAsClient($computerName)

    #Read the certificate

    $certinfo = New-Object system.security.cryptography.x509certificates.x509certificate2($sslStream.RemoteCertificate)

}

Write-Host "Message.Issuer: Issuer: ", $certinfo.Issuer

Write-Host "Statistic.Issuer: 1"

exit 0