ssl_exporter

Changelog

• 3f34a7b Bump modules (#174)
• e810f50 Bump github.com/prometheus/common from 0.48.0 to 0.53.0 (#172)
• ccea4e9 Bump golang.org/x/crypto from 0.21.0 to 0.22.0 (#170)
• 1cedc5a Bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 (#169)
• 3424423 Fix tcp starttls test for smtp (#167)
• 07786ae Bump golang.org/x/crypto from 0.17.0 to 0.21.0 (#165)
• 734396b Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 (#161)
• 76e1464 Bump docker/setup-qemu-action from 2 to 3 (#154)
• 7d95b17 Bump actions/checkout from 3 to 4 (#153)
• 9725277 Bump docker/login-action from 2 to 3 (#152)
• 6317311 Bump actions/upload-artifact from 3 to 4 (#151)
• 433631e Bump actions/setup-go from 4 to 5 (#150)
• 2e63964 Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 (#166)
• a537a91 Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#168)
• 376cb7e fix description (#155)
• 890c510 Bump actions/setup-go from 3 to 4 (#131)
• 3a594bc Bump modules and Go version (#148)
• 4526fea Bump golang.org/x/text from 0.3.7 to 0.3.8 (#126)
• e8e2ba0 Bump github.com/prometheus/client_model from 0.2.0 to 0.3.0 (#117)
• 9d2fefe Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#110)

Changelog

• 8b30e09 Bump dependencies (#108)
• 0c34528 Bump github.com/prometheus/common from 0.35.0 to 0.36.0 (#106)
• cad7f2a Bump github.com/prometheus/common from 0.34.0 to 0.35.0 (#104)
• 57395f8 Bump github.com/go-kit/log from 0.2.0 to 0.2.1 (#99)
• 9c5ba75 Bump docker/setup-qemu-action from 1 to 2 (#96)
• 8f808b7 Bump docker/login-action from 1 to 2 (#97)
• 120cbe6 Bump github.com/prometheus/client_golang from 1.12.1 to 1.12.2 (#98)
• 67a8b2d Update README.md (#90)

Changelog

• 52fb447 Amend module path for v2
• 793444c Bump actions/setup-go from 1 to 3 (#94)
• a4b90c6 Bump actions/checkout from 2 to 3 (#95)
• ee7c7c6 Bump actions/upload-artifact from 2 to 3 (#93)
• cd7adea Update kubernetes deps
• ee51a3e Update go.mod and add dependabot
• 65249bc added pop3 STARTTLS queryResponse (#84)
• 8e31893 Build multi-arch docker images
• d38244b Release additional archs

Changelog

• 02d6183 Add default_module and target options
• 087c407 Move grafana dashboard to contrib
• d475f3a Update release instructions
• a8dcb43 Use FieldSelector to select only tls secrets (#82)
• 0b96063 CI improvements
• 88198bf Install goreleaser with go install
• b5b2729 Go 1.17 and update deps
• 43dee90 Support TLS renegotiation (#83)
• 78306b9 actions: push to Docker Hub

Changelog

08d9a66 Release 2.3.1
a94845a Add support for postgresql protocol (#77)
ef1a35d Update dependencies (#76)

Changelog

4aaa67e Release 2.2.1
83f0127 Move to github.com/prometheus/common/promlog for logging (#71)
d5cbd64 Update README.md
5265251 Support getting certificate information from a kubeconfig file (#61)
b37574b [added] release target add mips64le (#65)

This release includes a number of new features:

• OCSP stapling metrics
• Prober for certificates in Kubernetes secrets
• Prober for certificates in local files
• Configurable timeout for modules

Please note that the ssl_tls_connect_success metric has been renamed to ssl_probe_success.

Changelog

5d3ac12 release 2.2.0
44d8713 Add test for TLS version metric
8cde56c Fix examples in the README
fdda9c3 Add prober column to metrics table
d92d7be Add file prober to example config
ca7aa1f Fix golint errors
13a03b1 Move tests to prober package
67539b6 Use same results check for file + kube probes
f4782e3 Make the description in the README more succinct
63dcb9a Add kubernetes prober
0506638 Add file prober
c74c0de Refactor prober function and metrics collection
e05745b Export OCSP stapling metrics (#54)
896b59b Update deps && go 1.15
119d3cd Add a configurable timeout to the module configuration (#55)

Changelog

224fb62 release 2.1.1
b84db80 Fix ssl_verified_cert_not_after typo

Changelog

c0f4183 release 2.1.0
17aa4e2 Add metrics for certificates in the verified chains (#48)
ddedd5f Add more information to error logs (#49)
ac9bc31 add a file name extension to the generated binary when the host (e.g. windows) requires it (#47)
b4b8471 build windows release (#43)

This release modifies the way the exporter is configured to use a modules/probers structure as seen in the blackbox_exporter.

This should be a no-op for the majority of users, however please note the following:

• The --tls.insecure, --tls.cacert, --tls.client-auth, --tls.cert and --tls.key options have been removed. Please define a module with the corresponding TLS options instead. Refer to the example.
• If you were relying on http proxying or other http client features, you will need to update your scrape config to use the https prober module, rather than relying on the exporter comprehending the scheme of the target. This is covered in the README.

Some new features have been introduced as well:

• Support for setting TLS servername
• STARTTLS support for smtp, imap and ftp
• Defining a http proxy url explicitly on a per-module basis

Changelog

b2ed4e6 release 2.0.0
89eff28 Add starttls for smtp, imap and ftp (#36)
1c8bd16 Add proxy_url parameter to https configuration (#35)
801179e Move to a modules/probers model, like the blackbox_exporter. (#34)

Changelog

5ca5c8c release 1.0.1
dc2882c Fix emailAddresses (#33)
8ef058e Modify build and release processes (#32)
41830d4 Fix connection leak (#31)
1305aac renew test certificates (#28)

This release introduces significant changes to the metric structure, removing most of the metrics and leaving ssl_cert_not_after and ssl_cert_not_before but with metadata attached as labels.

In addition to that change, this release also adds a new metric ssl_tls_version_info which reports the TLS version used in the probe.

Changelog

b7cdf62 update release process notes in README
c98cb10 cut 1.0.0 release
66ae153 add a grafana dashboard (#25)
13519dd add goreleaser
e3477cf add TLS version metric (#24)
80765ab add a github action to build the docker image
78ce406ce21c34a2be558f07c293b646a742df5f fix tests
11e3e4c move metadata out of metrics and into labels
000c8a8907e47cac97c68d0ecff7357fa5c2d861 add tests for notBefore and notAfter
486b47fd9dd46dfc217230d883a5727b4de56bae describe not before metric
0983ffdba6eabd72e159ebd9c9d9275d4c40f30d use the parsed target when connecting with the http client
874f02f403ffef3e899e4f05b26287ea5d58aade fix docker instructions in README
5b927d85bd12232697d28fe8e2cebc1b82d5ef6c fix example queries in README
81ff845a10e4cdfc15dcb95e036a9da7e73092fb bump go version in .promu.yaml
008952960e0200ebfc49c07da303c82334170825 build with go 1.13 explicitly in the Dockerfile
0a4a4023d4f9bf4bab113be65246222369f2c19b remove unnecessary STATICCHECK_IGNORE from Makefile
6d5223cb4b3fe46cca6e0f2086bf2e542f604359 use promhttp.Handler()
81504f6140a5076a509e9bc77eb34f01597a0f42 make it work with Go 1.13

• Reinstate the http client for https://* addresses for the sake of proxying

This removes support for ldaps://* targets. Please use the form *:636 instead.

• Modify the exporter to act as a TLS client, rather than a HTTPS client
• Make some attempt to convert targets into a valid format
• Fix an issue where the subject_ou metric was only exported if there were subject IPs

This is a significant update to the way the exporter works but should be mostly backwards compatible.

The only potentially breaking change is that the name of the success metric has changed from ssl_https_connect_success to ssl_tls_connect_success.

• Support client authentication

• Export organisational units
• Fix the example target

• No appreciable changes in the code, but:
• Tested
• Dockerised

• Initial release