MBG 11.0.0.309 - configure alarms

[SNJQuintin]

Good morning. I want to change the parameters for the SSL expiration alert. Right now, it starts going off daily 3 weeks before it expires, but we are using Let's Encrypt, so I would like to push the start of that alarm forward past the time that LE auto renews. That way if LE renewal fails, I will still get notified, but not be notified daily when it is not needed.


Thanks,

Q

 

[Billz66]

lets encrypt should auto renew at 30 days before expiry

https://support.dnsimple.com/articles/renewing-lets-encrypt-ssl-certificate/

"All Let’s Encrypt SSL certificates, including renewals, are valid for no more than 90 days from their issue date. Thirty days before the certificate expires you will begin receiving renewal notices"

if the MBG hasn't renewed then it will at 21 days start to warn you

it DOESN'T wait until the current expiry date to renew it tries to renew 30 days earlier than its due to expire

Sounds like you have a renwal problem - there have been some recent issues with auto renewal - some servers require patching to get that to work
whats the MSL version the MBG is running ?

MSL warnings cant be changed

NOTE: Events are raised prior to, and on the date of expiry of the certificate.
Ensure to regularly check the event viewer or configure email alerts.
Certificate already expired: MAJOR
Expires in less than 1 week: MINOR
Expires in less than 3 weeks: WARNING

If I never did anything I'd never done before , I'd never do anything.....