Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Free Certificate Monitoring via RSS

raphting.dev

Post reply on HN
Print view View original

1–10 of 30 posts

Re: Show HN: Free Certificate Monitoring via RSS

#3

Post by boricj »

Neat!

Recently my Synology NAS failed to automatically renew its Let's Encrypt certificate for my domain name and the certificate expired on my blog. I caught it the next day when my GoAccess metrics cratered (took some time to figure out since I normally use the QuickConnect domain name myself, whose certificate was fine), but it could've stayed broken for a very long time otherwise without me noticing.

You got yourself a subscriber.

Re: Show HN: Free Certificate Monitoring via RSS

#4

Post by toomuchtodo »

boricj wrote: post #3

Neat! Recently my Synology NAS failed to automatically renew its Let's Encrypt certificate for my domain name and the certificate expired on my blog. I caught it the next day when my GoAccess metrics cratered (took some time to figure out since I normally use the QuickConnect domain name myself, whose certificate was fine), but it could've stayed broken for a very long time otherwise without me noticing. You got your…

Does Let's Encrypt not provide alerting when a cert hasn't been refreshed successfully?

https://letsencrypt.org/docs/expiration-emails/

Re: Show HN: Free Certificate Monitoring via RSS

#5

Post by nacs »

toomuchtodo wrote: post #4
boricj wrote: post #3

Neat! Recently my Synology NAS failed to automatically renew its Let's Encrypt certificate for my domain name and the certificate expired on my blog. I caught it the next day when my GoAccess metrics cratered (took some time to figure out since I normally use the QuickConnect domain name myself, whose certificate was fine), but it could've stayed broken for a very long time otherwise without me noticing. You got your…

Does Let's Encrypt not provide alerting when a cert hasn't been refreshed successfully? https://letsencrypt.org/docs/expiration-emails/

They do and it has saved me a couple of times.

Even though the renewal app runs as a cron job weekly, it occasionally breaks due to OS updates or some other issue so the email from Lets encrypt that warns me at least a week or before the expiration has been fantastic.

Re: Show HN: Free Certificate Monitoring via RSS

#6

Post by boricj »

toomuchtodo wrote: post #4
boricj wrote: post #3

Neat! Recently my Synology NAS failed to automatically renew its Let's Encrypt certificate for my domain name and the certificate expired on my blog. I caught it the next day when my GoAccess metrics cratered (took some time to figure out since I normally use the QuickConnect domain name myself, whose certificate was fine), but it could've stayed broken for a very long time otherwise without me noticing. You got your…

Does Let's Encrypt not provide alerting when a cert hasn't been refreshed successfully? https://letsencrypt.org/docs/expiration-emails/

I did get an email, but it was triaged under the update category inside Gmail and thus buried under a metric ton of other updates (the account is over 14 years old and it has accumulated a lot of crap over the years).

That's totally on me for missing it. On the other hand I only follow a couple of RSS feeds, so it's a notification channel with a far higher signal-to-noise ratio for me.

Re: Show HN: Free Certificate Monitoring via RSS

#9

Post by LorenDB »

Super neat tool, but given that I use Caddy, that kinda prevents this issue from happening for me. While a monitoring tool is always a good idea, maybe the best long-term solution would be to encourage certificate auto-renewal tools. OTOH, I have only worked with this on a personal level, so maybe there's problems with auto-renewal that I haven't learned about.
Post reply on HN