Hacker News Reader

Comment by spullara | Hacker News Reader

I'm surprised there aren't companies that look at the expiration dates of SSL certificates and try and get them to use their service to get a new one, like domain people do. Seems like it could also be a feature of New Relic / Pingdom / etc.

View on HN

We have this at our website monitoring and recovery service https://t1mr.com and it's free.

This looks quite handy! I've got an SSL certificate installed from StartSSL and I'm getting this error though:

    [Errno 1] _ssl.c:504: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Hmm, seems I missed a step installing this certificate. No worries, I'm on it :)

Would you consider adding a check for particular string on page? That would be handy.

Also, if you check SSL cert validity, you should totally advertise that! I remember I've been paying for one such service where they would monitor SSL url, but would not alert you about SSL cert expiration. I found out the hard way.

Sure, checking for a string on the web page is also in the basic functionality. We also ping your site every minute, so you'll know about problems immediately.

The advanced (paid) functionality is a restart of your vps or other automatic ssh action trying to recover it when it's down.

My nagios has a check specific for expiration of certificates. First I get a warning 14 days before and an error 3 days before.

Many SSL providers have sales staff that try to contact their own customers prior to expiration.

There are - I get spam from more than one of them. However, at least the ones I get are not from "brand names", but rather no-name resellers.

I'm actually in the process of writing an app to do this. If you'd be interested in seeing the MVP when it is ready, feel signup to our mailing list: http://launch.renewalmonitor.com/

Oh there are. Most seem to just be trolls, though.

I've set up nagios alerts around SSL certs. It's free and easy.

Reply on news.ycombinator.com