How to determine if self signed cert is being used about lua-resty-auto-ssl HOT 8 CLOSED

This is a great feature. We need it too.

from lua-resty-auto-ssl.

If the request comes in over SSL, then the only way to respond to it (without causing the browser to show a certificate error) is using a cert that matches the request host. If the server's response uses a cert that doesn't match, then the browser will show a certificate error.

from lua-resty-auto-ssl.

Is there any way to run a script so that we can get alerted via another channel like Telegram or Slack?

from lua-resty-auto-ssl.

Yes, you'd just place your notification code in the if not has_cert then block in your sample code above. You can do whatever you want there on the server side — you just won't be able to successfully respond to the client's https request without a valid cert.

from lua-resty-auto-ssl.

Thanks. In the query above the OP says the call failed. Any idea why that would the case?

from lua-resty-auto-ssl.

I don't know the internals well enough to know why that would fail, but you could put your notification functionality in the allow_domain function just before you return false. e.g.:

auto_ssl:set("allow_domain", function(domain, auto_ssl, ssl_options, renewal)
  local domain_not_allowed = ...
  if domain_not_allowed
    notify_us_on_slack(domain)
    return false
  end
end

from lua-resty-auto-ssl.

ok, thanks

from lua-resty-auto-ssl.

You can use lua redis package (reuse one provided with resty-auto-ssl) or other db provider, and check there, i've done similar things, it's not a lot of work, but seem to have lost the config i used 2-3 years ago

from lua-resty-auto-ssl.