Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add additional extracted TLS cert fields to the TLS monitor #41279

Open
FrankieAtElastic opened this issue Oct 17, 2024 · 1 comment
Open

Add additional extracted TLS cert fields to the TLS monitor #41279

FrankieAtElastic opened this issue Oct 17, 2024 · 1 comment
Labels
Team:Uptime Label for the Uptime team

Comments

@FrankieAtElastic
Copy link

Describe the enhancement:
The uptime monitor provided by Elastic Synthetics gives a nice UI and overview of TLS certificates being monitored, it would be great if we could extract more fields from the certificate, such as emailAddress, subjectAltDNS, subjectAltIP, SKI (public key hash)

Describe a specific use case for the enhancement or feature:
This would enable further insights into monitored certificates by having further visible fields.

  • emailAddress: would grant a point of contact for alerts regarding certificate expiration, potentially allowing for notification to these owners
  • SKI: Would provide a way of identifying the public key, as neither the cert fingerprint nor the serial number is unique to just the public key. The use case for this is more niche, and from a security perspective such as tracking re-use of private keys. A POC was made using 'the graph' that mapped the journey of a public key across different environments / CAs to track re-use and identify very old keypairs
  • subjectAltDNS / subjectAltIP: Provides more context about where the certificate is useable
@botelastic botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Oct 17, 2024
@FrankieAtElastic FrankieAtElastic added the Team:Uptime Label for the Uptime team label Oct 17, 2024
@botelastic botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Oct 17, 2024
@FrankieAtElastic
Copy link
Author

I will be happy to create a PR for this if it sounds good.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Team:Uptime Label for the Uptime team
Projects
None yet
Development

No branches or pull requests

1 participant