Recued
Menu
← Back to recipes

Register a certificate to watch

by recued-core v2 9 views

Use “Register a certificate to watch” in Recued. Record one certificate file so Check the certificates will read it. Keyed on its path, so re-registering the same file converges.

Complete workflow

Certificate Watch 4 pinned recipes

Use Certificate Watch in Recued for tls, expiry, monitoring, and openssl. It includes 6 built-in actions and 3 ready-to-run workflows. Actions that change data use Recued's approval controls.

You are viewing one recipe in this workflow. Installing it opens the complete pack so its other recipes and background automations arrive together.

Use “Register a certificate to watch” in Recued. Record one certificate file so Check the certificates will read it. Keyed on its path, so re-registering the same file converges.

pack:certificate-watchcertificatetlsrecords
by recued-core pinned v2

Use “Check the certificates” in Recued. Read every registered certificate and record whether it is healthy, running out within thirty days, or unreadable. A file that cannot be parsed is reported as unreadable rather than counted as healthy, because those two answers look identical to the expiry check on its own.

pack:certificate-watchcertificatetlsexpiry
by recued-core pinned v2

Use “Show the certificates” in Recued. List watched certificates with their status, subject and expiry. Read-only — it re-reads no file and re-runs no check.

pack:certificate-watchcertificateboardrecords
by recued-core pinned v2
View pack details, dependencies, and permissions →

Registering

Give the path of a PEM certificate file and a label you will recognise on the board.

unchecked is not ok. Nothing is read here — not even to confirm the file is a certificate. Check the certificates is what looks, and it is what will tell you a path is unreadable.

Register the LEAF certificate, not the private key. The key is not a certificate, so it would simply be reported unreadable — but there is no reason to point this at one.

The path is the key. If the file moves, register the new path; the old row keeps reporting on a file that is no longer there.

How it works 13 steps

Inspect the data fetches, transforms, gates, and output this recipe runs.

Process (13 steps)
label trim
Trim whitespace from setting label
path trim
Trim whitespace from setting path
inputs_valid all
Check if all conditions are true
inputs_guard guard
Stop if inputs valid equals
existing ?
existing_rows default
Apply default
existing_count count
Count items in existing rows
cert_exists compare
Check if existing count is greater than 0
cert_create ?
skip: step.cert_exists equal true
cert_id coalesce
Use the first available value from: cert create record id, existing rows 0 id
cert_recorded compare
Check if cert id has data
cert_guard guard
Stop if cert recorded equals
card to_summary
Format results as a summary card
Settings 2 configurable

Configurable at install. Defaults shown — change them anytime in Recued.

path setting = [object Object]
label setting = [object Object]

About

Tags

pack:certificate-watchcertificatetlsrecordsv2

Details

13 steps 2 configurable settings recipe_id: register-certificate