App Control: Events Not Firing For "SSL Certificate Expiring" Configuration

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

• No events firing to indicate the SSL certificate is expiring soon.
• Event fires when SSL certificate expires.

Environment

• App Control Server: 8.0.x - 8.10.0

Cause

This issue was tracked under EP-20142 and resolved with the release of Server 8.10.2.

Resolution

Upgrading to Server 8.10.2 will restore this functionality.

Additional Information

The following Shepherd Configs (https://<server-name>.com/shepherd_config.php) should already be set when the SSL certificate events do not fire:

• CertificateExpirationCheckPeriodSeconds - How often to check for cert expiration violation. Defaults to every hour
• CertificateExpirationWarningTimeThresholdDays - how long before the cert expiration will warn in days. Default is 2 weeks/14 days
• CertificateExpirationWarningEventDelay - delay in minutes between warning events. Default is once a day
• CertificateExpirationWarningLastEventTime - stores the time that will be used for triggering the warning event.