search

ribbybibby / ssl_exporter

Exports Prometheus metrics for TLS certificates
Apache License 2.0
504 stars 95 forks source link

feature: OCSP prober #101

Open britcey opened 2 years ago

britcey commented 2 years ago

Add OCSP prober for checking OCSP responders.

This will make an OCSP request to the target, using the supplied certificates (a certificate to be checked and the certificate that signed it). We supply the issuing cert so we're limiting our testing to just the responder vs. testing whether the issuing cert can be downloaded via the 'Issuing Certificate URL' specified in the client cert.

Will return just the ssl_ocsp* metrics.

This allows you to confirm OCSP responders are functional.

johanfleury commented 1 year ago

Hey, you might want to have a look at #81.

britcey commented 1 year ago

As mentioned in #100, it's a different use-case.

Both PRs could certainly be useful to people.

pschiffe commented 1 month ago

I'm currently looking for a probe just like this

britcey commented 1 month ago

I'm currently looking for a probe just like this

FWIW, I've been running this fork since I submitted it without issues.

I'll try to dig up some cycles this week to rebase it against current master.

britcey commented 3 weeks ago

Refreshed PR vs. current master