Skip to content

A tool for checking SSL certs in bulk utilising New Relic synthetic minions

Notifications You must be signed in to change notification settings

newrelic-experimental/nr-bulk-ssl-checker

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

26 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Bulk SSL Checker

This application allows you to check SSL certificate expiry in bulk. The application is a nodejs script that can run within the New Relic Synthetics minion. The terraform package allows you to easily deploy the application to your account, it automates provisioning of of the synthetic, secure credentials, posture dashboards. You may also simply copy and paste the script if you do not want to use terraform.

Defining targets

The targets to test are provided by calling the function getTargets(). You can provide the payload of this function which may return static data or if you like you can request dynamic data to be used via an API call. Targets are expected to be in the following JSON format:

[
    {
        "name":"BBC News"
        "domain":"news.bbc.co.uk"
    },
    {
        "domain":"foo.com",
        "hosts": [
            "111.222.333.444",
            "555.666.777.888",
        ]
    },
    {
        "domain":"bam.com",
        "timeout": 10000,
        "hosts": [
            "111.222.333.444",
            "555.666.777.888",
        ]
    },
    {...}
]
  • name: Optional
  • domain: Required
  • hosts: Optional
  • timeout: Optional

Getting started (terraform)

  1. Checkout the repo
  2. Copy runtf.sh.sample to runtf.sh and add your API keys
  3. terraform init to initialise
  4. ./runtf.sh apply to deploy to New Relic.

Configuration

  • API Keys - ./terraform/runtf.sh
  • Target Data Sources - ./terraform/main.tf
  • Thresholds and timeouts - ./terraform/modules/sslchecker/modules/sslminion/src/synthetic.js (built)

Dashboard

The application comes with a built in dashboard. Set up alerts as you require.

dashboard-example

Getting started (Copy and Paste)

Simply copy and paste the copy-paste-example.js into a Scripted API synthetic monitor. You will need to provide an ingest API key (prefereably via a secure credential) and define your getTargets() function.

About

A tool for checking SSL certs in bulk utilising New Relic synthetic minions

Topics

Resources

Code of conduct

Security policy

Stars

Watchers

Forks

Packages

No packages published