Warning of SSL Certificate Expiration

[#1]

Does anyone know if there is a built in way for privatecloud to send a notification/email if a SSL certificate is about to expire? or if it isn't, what would be the best approach to accomplishing that?

Thanks

[gnanasekaran]

Typically its your CA's who would send the notification about expiring certificates.

[Former Community Member]

@rj.walshthere is no built in way to check on SSL cert expiry.

[divyaachan]

@rj.walsh

On our Apigee Edge, we have released a feature which will allow you to see all certs that are expiring in 10, 15, 30 or 90 days. You will be able to just the view the certs but not send an alert/email yet.

This feature is not yet on our private cloud and will likely be in our latest release soon.

Attached is a screenshot on how this feature looks like on Apigee Edge. Its under the Admin -> SSL Certificates

[#5]

Thanks Divya. Do you know if they are going to be API calls as well or just in the UI?

[ozanseymen]

@rj.walsh: there are APIs that will give you certificate information but there are no APIs to query the store for you and return certificates that are expiring in x days. As you are interested in knowing about APIs, I am assuming you are happy to write an app to use the APIs to get certificate information and check for expiry in x days.

API to get all keystores per environment:

https://api.enterprise.apigee.com/v1/o/{org}/environments/{env}/keystores

http://apigee.com/docs/management/apis/get/organizations/%7Borg_name%7D/environments/%7Benv_name%7D/...

For each keystore, get certs:

https://api.enterprise.apigee.com/v1/o/{org}/environments/{env}/keystores/{keystore}/certs

Get cert:

https://api.enterprise.apigee.com/v1/o/{org}/environments/{env}/keystores/{keystore}/certs/{cert}

http://apigee.com/docs/management/apis/get/organizations/%7Borg_name%7D/environments/%7Benv_name%7D/...