SSL Certificate Expiration - SNI capable

SSL Certificate Expiration - SNI capable

For those that deploy SNI when hosting websites you've probably discovered that monitoring the SSL certificate expiration only shows the first certificate in the list.

This check was designed to match the certificate Common Name (CN).

I created an external node for thwack.solarwinds.com

pastedImage_0.png

The powershell scripts pulls the node name and returns the number of days until it expires. It also prints more details in the Statistic Message.

UPDATED: Inluded the Certification Authority into the statistic message detail.

pastedImage_1.png

I also created this SSL report that can be imported.

SSL Certificate Expiration - SNI Capable Report.xml

*Updated - 1/25/2016 - Fix bug when no CA was present in the certificate.

*Updated - 3/21/2018 - Updated script significantly to allow for TLS 1.2 only connections. Thanks for the assist sstark85​!

Parents
  • Hello Chad,

    As i am new to Solarwinds monitoring, i am not able to see option SSL Certificate Expiration - SNI Capable in Create Template... Can you please give me Step by step configuration. I was able to see SSL Certificate Expiration Date Monitor and it does not show SNI capable.

    NPM veriosn is 12.2 and SAM version is 6.4

    Thanks in Advance..

Comment
  • Hello Chad,

    As i am new to Solarwinds monitoring, i am not able to see option SSL Certificate Expiration - SNI Capable in Create Template... Can you please give me Step by step configuration. I was able to see SSL Certificate Expiration Date Monitor and it does not show SNI capable.

    NPM veriosn is 12.2 and SAM version is 6.4

    Thanks in Advance..

Children
No Data