Skip to content

Dealing with revoked certificates #1254

@ccoenen

Description

@ccoenen

⚠️ Please verify that this feature request has NOT been suggested before.

  • I checked and didn't find similar feature request

🏷️ Feature Request Type

Other

🔖 Feature description

Uptime Kuma checks the time until certificates expire. It could also check for the validity based on their revocation status.

✔️ Solution

On top of alerting for outdated certs, it should also alert for revoked certs.

❓ Alternatives

No response

📝 Additional Context

Let's encrypt is in the process of revoking a number of certificates this week. The issued certificates would still be before their expiration date, but will nonetheless be causing security warnings for clients. This can't be fully avoided with this, but at least one would not be notified by users/clients but from the monitoring system.

More context: https://www.bleepingcomputer.com/news/security/lets-encrypt-is-revoking-lots-of-ssl-certificates-in-two-days/

While this supposed future enhancement will not help with this week's problem, it might help mitigate a potential future similar incident.

Metadata

Metadata

Assignees

No one assigned

    Labels

    A:cert-expiryAreas related to certificate expiry notificationsfeature-requestRequest for new features to be added

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions