SP Cert expiration log

[vadud3 at gmail.com]

Hi All,

We recently got into a situation where our SP cert expired and we only
found out the next morning when everyone was trying to login, yikes! We
remedy the situation and monitoring the cert.

Is there a recommended string/phrase in /var/log/shibboleth/shibd.log that
would identify that cert expired? We could alert us based on that. I know
it would be too late and we probably need a better solution. But I also
like to catch in the log as evidence.

Thanks,
Asif


-- 
Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210707/708fd0e6/attachment.htm>