3 ms·
Define "managing"? I use simple Nagios checks for keeping an eye on certificate expiration. It's simple to set up checks for new hosts/services and I have them
by jlgaddis 9y ago
Define "managing"?
I use simple Nagios checks for keeping an eye on certificate expiration. It's simple to set up checks for new hosts/services and I have them set to trigger an e-mail alert 30 days before expiration (20 days for certificates from Let's Encrypt). It does the job; I have yet to wake up one day to an expired certificate.
Apparently, this ("send me an e-mail before my certificate expires") is also the sole reason some companies even exist (i.e., it is their only product/service). It amazes me that this is something folks will pay for.
- jandrese 9y agoWhat happens when you leave for a different job or get hit by a bus? More than one cert has expired because the guy who was maintaining them moved on and nobody else knew how to keep them up to date. Obviously it should be part of a handoff process when you leave, but companies aren't always good at smoothly handling transitions like this.
- jlgaddis 9y agoI've been hit by a bus! Well, a Jeep Cherokee, technically, but I was on a motorcycle so it felt like a bus. I was off work for ~4 months -- couldn't even walk for the first three and could barely feed myself. We managed, though. We got by and didn't have any SHTF moments in my absence. What happens if I leave, though? I don't know and, TBH, I won't really care; it won't be my problem at that point. How -- if -- things are handed off or transferred off to someone else when I leave will be up to my boss, I suppose.
- rb808 9y agoI think 30 days might not be enough - maybe its best to create a new certificate every build or every month.