[SERVER-10961] Warn if a server certificate is about to expire Created: 30/Sep/13  Updated: 11/Jul/16  Resolved: 28/Jul/14

Status: Closed
Project: Core Server
Component/s: Security
Affects Version/s: 2.5.2
Fix Version/s: 2.7.4

Type: New Feature Priority: Major - P3
Reporter: Andreas Nilsson Assignee: Melissa O'Sullivan
Resolution: Done Votes: 0
Labels: cap-ticket-needed
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
related to SERVER-11107 By default, mongod should not start w... Closed
related to SERVER-15494 Certification expiration warning impr... Backlog
Tested
Participants:

 Description   

Send out a daily server warning if any of the server certificates are about to expire. This will assist users in avoiding the mistake of not updating their certificates.



 Comments   
Comment by Melissa O'Sullivan [ 28/Jul/14 ]

Log messages that warn once daily if a certificate has already expired or will expire in the next 30 days were added in with the startup certificate expiration check. https://jira.mongodb.org/browse/SERVER-11107 https://github.com/mongodb/mongo/commit/bc780e2e72f6862ac126f4eb5617cc58ef2657b4

Comment by Scott Hernandez (Inactive) [ 30/Sep/13 ]

It is just a category, for warnings that we show with importance (which started for things that happened at startup). We can use it more often (like once a day for example) but it just feels named incorrectly when we do. It seems like renaming it to systemWarnings or something might make more sense but ...

Comment by Spencer Brody (Inactive) [ 30/Sep/13 ]

Yep, that's what I want us to do.
Though I'm not sure if we can use startupWarnings since we may want to check this condition more frequently than just at startup.

Comment by Scott Hernandez (Inactive) [ 30/Sep/13 ]

Spencer, we can by just added as a startupWarning, or other MMS monitored log category.

Comment by Spencer Brody (Inactive) [ 30/Sep/13 ]

Would be great if we could get this added to serverStatus or something that's tracked by MMS so MMS could display a warning.

Generated at Thu Feb 08 03:24:30 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.