Show HN: SSL certificate dashboard

#1

Post by Jens_ » Sun, May 29, 2016, 7:03 PM UTC

Show HN: SSL certificate dashboard
github.com

Re: Show HN: SSL certificate dashboard

#2

Post by joshmn » Mon, May 30, 2016, 12:24 AM UTC

I spent a weekend building a certificate dashboard right into Calendar.app. The front-end may not be React and the back-end definitely isn't written in Go, but it works really well. I didn't even need to install Redis or another NoSQL database. The CRUD is outstanding and the search support is great, even if its not based on Solr.

I ported my solution to both Google Calendar and whatever that thing is that would be the Microsoft equivalent. Full mobile support, entirely cross-platform. You can even use it on someone else's computer I mean cloud.

Re: Show HN: SSL certificate dashboard

#3

Post by _aucc » Mon, May 30, 2016, 12:44 AM UTC

Very cool! We use Jenkins to check when our SSL certificates are approaching 30 days until expiration. A simple call to openssl(1) works great!

Good stuff!

Re: Show HN: SSL certificate dashboard

#4

Post by koolba » Mon, May 30, 2016, 1:03 AM UTC

A better approach is to have an automated alert for certificates that are expiring soon (next X days) then sending out an alert. Or even better, switch to automatically rotating certs on a regular basis via letsencrypt.

Rotating certs is like restoring backups, if you only do it when shit hits the fan (server crashed or cert expired), you're doing it wrong.

Re: Show HN: SSL certificate dashboard

#5

Post by biot » Mon, May 30, 2016, 1:22 AM UTC

This is easy to do with Nagios and the check_http plugin, and Nagios is then your dashboard for not just SSL expiration but every other service you are (or should be) monitoring as well.

Re: Show HN: SSL certificate dashboard

#6

Post by i_have_to_speak » Mon, May 30, 2016, 1:34 AM UTC

Here's a command-line one written in Go: https://www.opsdash.com/blog/check-ssl-certificate.html

Re: Show HN: SSL certificate dashboard

#7

Post by vacri » Mon, May 30, 2016, 1:59 AM UTC

biot wrote: post #5

This is easy to do with Nagios and the check_http plugin, and Nagios is then your dashboard for not just SSL expiration but every other service you are (or should be) monitoring as well.

Simple if you already have Nagios set up and running... far from simple if you haven't.

Though someone here posted a video a couple of years ago where the speaker was imploring "Stop using Nagios [it's terrible]". At the end, someone asked him what they should use instead, to which the speaker didn't have an answer (his tool that he was speaking about was still in development)

Edit: but yes, you're right in that the important thing is that the tool will alert you without you having to remember to check it.

Re: Show HN: SSL certificate dashboard

#8

Post by centur » Mon, May 30, 2016, 2:05 AM UTC

these 2 dashboards have a lot of in common...

https://github.com/JensDebergh/certificate-dashboard https://github.com/cmrunton/tls-dashboard

Re: Show HN: SSL certificate dashboard

#9

Post by yeukhon » Mon, May 30, 2016, 3:05 AM UTC

centur wrote: post #8

these 2 dashboards have a lot of in common... https://github.com/JensDebergh/certificate-dashboard https://github.com/cmrunton/tls-dashboard

He did say he saw a similar project on GitHub.

Re: Show HN: SSL certificate dashboard

#10

Post by ben_jones » Mon, May 30, 2016, 3:34 AM UTC

yeukhon wrote: post #9

centur wrote: post #8

these 2 dashboards have a lot of in common... https://github.com/JensDebergh/certificate-dashboard https://github.com/cmrunton/tls-dashboard

He did say he saw a similar project on GitHub.

"I've seen a static version of this project on github, but I forgot the name of the original project. It is his static version of the dashboard turned into a configurable service that spits out HTML & JSON."

EDIT:

I think he gave proper credits.