Re: [prometheus-users] "Sectigo AddTrust External CA Root" and the "probe_ssl_earliest_cert_expiry"

t that removing the old Root CA > is probably a good test to do anyway. > > --Matt > > On Tue, May 12, 2020 at 6:40 PM Harald Koch > wrote: > >> On Tue, May 12, 2020, at 18:34, Julian van den Berkmortel wrote: >> >> It's in regards to the "probe_ssl

Re: [prometheus-users] "Sectigo AddTrust External CA Root" and the "probe_ssl_earliest_cert_expiry"

s signing certificates for > the newer root CAs should mean you don't have to do anything. If you don't > have an updated trust store, you have work to do. > > --Matt > > On Tue, May 12, 2020 at 5:26 PM Julian van den Berkmortel < > jul...@weprovide.com > wro

[prometheus-users] "Sectigo AddTrust External CA Root" and the "probe_ssl_earliest_cert_expiry"

I won't ask "why is this happening" because enough has been said about that, the reasoning behind it or what "probe_ssl_earliest_cert_expiry" does, does not or should do. I only have one question which is, what will happen after the expiry of the "Sectigo AddTrust External CA Root" certificate