On Tue, Oct 20, 2020, at 08:52, Nemanja Delic wrote: > In this case the cert has expired on Oct 13 22:12:47 2020 GMT. Since it's not > last one in chain it's not breaking things. I can set the filter accordingly > ( with smth like > -7), just thought there might be some other solution.
PKIX path validation requires that *all* certificates be valid at the time of validation: RFC 5280 Section 6.1.3. As soon as any certificate in the path expires, the entire chain is invalidated. So yeah - things are probably breaking. -- Harald -- You received this message because you are subscribed to the Google Groups "Prometheus Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to prometheus-users+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/prometheus-users/ff354baa-15cc-4d88-9419-d94f81a8ede3%40www.fastmail.com.
