3 ms·
I recommend always monitoring server logs as a last line of defense (or first, honestly) for these kinds of things.
by mholt 9y ago
I recommend always monitoring server logs as a last line of defense (or first, honestly) for these kinds of things.
- Ajedi32 9y agoDo Apache's server logs notify you if your cert is about to expire, but hasn't yet?
- mholt 9y agoI doubt it does in general, but mod_md does have a pretty chatty log if you enable it. Haven't tested this specifically, but I assume it prints something around renewal time.
- majewsky 9y agoExpiration dates on your TLS certs is usually something that you want to monitor and alert on anyway. I'd actually build the monitoring separately from the renewal process, just in case that the renewal process doesn't notice that it fails.