WAS SSL Certificate Expiry and Email Notifications
WAS SSL Certificate Expiry and Email Notifications
Gmail: [email protected]
Protocol: smtp
Starttls: True
1) Log on to WAS console and navigate to Resources > Mail > Mail Sessions and click New
3) Click on newly created mail session emailnotify and edit custom properties and below 2
properties.
A) mail.smtp.starttls.enable : true
B) mail.smtp.port : 587
4) SSL certificate and key management > Manage certificate expiration > Notifications
And click on new to create a new notification named mynotification
5) Check on Maillog and Email sent to notification list
6) Enter Email Address to add : Receipt Email address ( [email protected])
9) com.ibm.websphere.security.notification.useWebSphereMailSession :true
10) Save and sync the changes and restart NDM. And monitor systemout.log
Manually generate notifications by navigating Security > SSL certificate and key management >
Manage certificate expiration and click on Start Now and check in log
[9/30/23 21:58:48:691 IST] 000000c2 StartCertific I CWPKI0801I: The certificate expiration monitor started.
[9/30/23 21:58:51:828 IST] 000000c2 WSNotifier I CWPKI0037I: Expiration monitor reports the following information:
Hostname: redhat9.tk
Checking for expired certificate and certificates in the 400 days threshold period.
CWPKI0643I: Personal certificate alias "default" in KeyStore "CellDefaultKeyStore((cell):cell3)" will expire on Sep 28, 2024.
CWPKI0643I: Personal certificate alias "default" in KeyStore "CellRSATokenKeyStore((cell):cell3)" will expire on Sep 28, 2024.
*** CERTIFICATES THAT ARE EXPIRED OR BEYOND THE EXPIRATION THRESHOLD AND HAVE BEEN REPLACED ***;
CWPKI0645I: Personal certificate alias "default" in KeyStore "CellDefaultKeyStore((cell):cell3)" was REPLACED.
[9/30/23 21:58:51:885 IST] 000000c2 SystemOut O DEBUG: successfully loaded resource: /META-INF/javamail.default.providers
[9/30/23 21:58:51:886 IST] 000000c2 SystemOut O DEBUG: Providers Listed By Class Name:
{com.sun.mail.smtp.SMTPSSLTransport=javax.mail.Provider[TRANSPORT,smtps,com.sun.mail.smtp.SMTPSSLTransport,Oracle],
com.sun.mail.smtp.SMTPTransport=javax.mail.Provider[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Oracle],
com.sun.mail.imap.IMAPSSLStore=javax.mail.Provider[STORE,imaps,com.sun.mail.imap.IMAPSSLStore,Oracle],
com.sun.mail.pop3.POP3SSLStore=javax.mail.Provider[STORE,pop3s,com.sun.mail.pop3.POP3SSLStore,Oracle],
com.sun.mail.imap.IMAPStore=javax.mail.Provider[STORE,imap,com.sun.mail.imap.IMAPStore,Oracle],
com.sun.mail.pop3.POP3Store=javax.mail.Provider[STORE,pop3,com.sun.mail.pop3.POP3Store,Oracle]}
[9/30/23 21:58:51:886 IST] 000000c2 SystemOut O DEBUG: successfully loaded resource: /META-INF/javamail.default.address.map
[9/30/23 21:58:51:900 IST] 000000c2 SystemOut O DEBUG: mail.smtp.class property exists and points to
com.sun.mail.smtp.SMTPTransport
[9/30/23 21:58:51:902 IST] 000000c2 SystemOut O DEBUG SMTP: useEhlo true, useAuth false
[9/30/23 21:58:51:902 IST] 000000c2 SystemOut O DEBUG SMTP: trying to connect to host "smtp.gmail.com", port 587, isSSL false
[9/30/23 21:58:51:917 IST] 000000c2 SystemOut O DEBUG SMTP: connected to host "smtp.gmail.com", port: 587
[9/30/23 21:58:51:928 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "SIZE", arg "35882577"
[9/30/23 21:58:51:928 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "8BITMIME", arg ""
[9/30/23 21:58:51:928 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "STARTTLS", arg ""
[9/30/23 21:58:51:928 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "ENHANCEDSTATUSCODES", arg ""
[9/30/23 21:58:51:928 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "PIPELINING", arg ""
[9/30/23 21:58:51:928 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "CHUNKING", arg ""
[9/30/23 21:58:51:928 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "SMTPUTF8", arg ""
[9/30/23 21:58:51:931 IST] 000000c2 SystemOut O 220 2.0.0 Ready to start TLS
[9/30/23 21:58:52:238 IST] 000000c2 SystemOut O 250-AUTH LOGIN PLAIN XOAUTH2 PLAIN-CLIENTTOKEN OAUTHBEARER
XOAUTH
[9/30/23 21:58:52:239 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "SIZE", arg "35882577"
[9/30/23 21:58:52:239 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "8BITMIME", arg ""
[9/30/23 21:58:52:239 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "AUTH", arg "LOGIN PLAIN XOAUTH2 PLAIN-
CLIENTTOKEN OAUTHBEARER XOAUTH"
[9/30/23 21:58:52:239 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "ENHANCEDSTATUSCODES", arg ""
[9/30/23 21:58:52:239 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "PIPELINING", arg ""
[9/30/23 21:58:52:239 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "CHUNKING", arg ""
[9/30/23 21:58:52:239 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "SMTPUTF8", arg ""
[9/30/23 21:58:52:239 IST] 000000c2 SystemOut O DEBUG SMTP: Attempt to authenticate using mechanisms: LOGIN PLAIN DIGEST-
MD5 NTLM
[9/30/23 21:58:52:239 IST] 000000c2 SystemOut O DEBUG SMTP: AUTH LOGIN command trace suppressed
[9/30/23 21:58:52:428 IST] 000000c2 SystemOut O DEBUG SMTP: AUTH LOGIN succeeded
[9/30/23 21:58:52:437 IST] 000000c2 SystemOut O DEBUG: mail.smtp.class property exists and points to
com.sun.mail.smtp.SMTPTransport
[9/30/23 21:58:52:437 IST] 000000c2 SystemOut O DEBUG SMTP: useEhlo true, useAuth false
[9/30/23 21:58:52:437 IST] 000000c2 SystemOut O DEBUG SMTP: trying to connect to host "smtp.gmail.com", port 587, isSSL false
[9/30/23 21:58:52:445 IST] 000000c2 SystemOut O DEBUG SMTP: connected to host "smtp.gmail.com", port: 587
[9/30/23 21:58:52:452 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "SIZE", arg "35882577"
[9/30/23 21:58:52:452 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "8BITMIME", arg ""
[9/30/23 21:58:52:452 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "STARTTLS", arg ""
[9/30/23 21:58:52:452 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "ENHANCEDSTATUSCODES", arg ""
[9/30/23 21:58:52:452 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "PIPELINING", arg ""
[9/30/23 21:58:52:452 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "CHUNKING", arg ""
[9/30/23 21:58:52:452 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "SMTPUTF8", arg ""
[9/30/23 21:58:52:454 IST] 000000c2 SystemOut O 220 2.0.0 Ready to start TLS
[9/30/23 21:58:52:471 IST] 000000c2 SystemOut O 250-AUTH LOGIN PLAIN XOAUTH2 PLAIN-CLIENTTOKEN OAUTHBEARER
XOAUTH
[9/30/23 21:58:52:471 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "SIZE", arg "35882577"
[9/30/23 21:58:52:471 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "8BITMIME", arg ""
[9/30/23 21:58:52:471 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "AUTH", arg "LOGIN PLAIN XOAUTH2 PLAIN-
CLIENTTOKEN OAUTHBEARER XOAUTH"
[9/30/23 21:58:52:471 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "ENHANCEDSTATUSCODES", arg ""
[9/30/23 21:58:52:471 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "PIPELINING", arg ""
[9/30/23 21:58:52:471 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "CHUNKING", arg ""
[9/30/23 21:58:52:471 IST] 000000c2 SystemOut O DEBUG SMTP: Found extension "SMTPUTF8", arg ""
[9/30/23 21:58:52:471 IST] 000000c2 SystemOut O DEBUG SMTP: Attempt to authenticate using mechanisms: LOGIN PLAIN DIGEST-
MD5 NTLM
[9/30/23 21:58:52:472 IST] 000000c2 SystemOut O DEBUG SMTP: AUTH LOGIN command trace suppressed
[9/30/23 21:58:52:624 IST] 000000c2 SystemOut O DEBUG SMTP: AUTH LOGIN succeeded
[9/30/23 21:58:53:001 IST] 000000c2 SystemOut O Subject: WebSphere Notification from process:
[9/30/23 21:58:53:001 IST] 000000c2 SystemOut O **** Subject: Expiration Monitor ****;
[9/30/23 21:58:53:002 IST] 000000c2 SystemOut O Checking for expired certificate and certificates in the 400 days threshold period.
[9/30/23 21:58:53:002 IST] 000000c2 SystemOut O *** CERTIFICATES THAT ARE EXIPIRED OR IN THE EXPIRATION
THRESHOLD ***;
[9/30/23 21:58:53:002 IST] 000000c2 SystemOut O CWPKI0643I: Personal certificate alias "default" in KeyStore
"CellDefaultKeyStore((cell):cell3)" will expire on Sep 28, 2024.
[9/30/23 21:58:53:002 IST] 000000c2 SystemOut O CWPKI0643I: Personal certificate alias "default" in KeyStore
"CellRSATokenKeyStore((cell):cell3)" will expire on Sep 28, 2024.
[9/30/23 21:58:53:002 IST] 000000c2 SystemOut O *** CERTIFICATES THAT ARE EXPIRED OR BEYOND THE EXPIRATION
THRESHOLD AND HAVE BEEN REPLACED ***;
[9/30/23 21:58:53:002 IST] 000000c2 SystemOut O CWPKI0645I: Personal certificate alias "default" in KeyStore
"CellDefaultKeyStore((cell):cell3)" was REPLACED.
[9/30/23 21:58:53:002 IST] 000000c2 SystemOut O CWPKI0645I: Personal certificate alias "default" in KeyStore
"CellRSATokenKeyStore((cell):cell3)" was REPLACED.
[9/30/23 21:58:53:002 IST] 000000c2 SystemOut O.
[9/30/23 21:58:53:578 IST] 000000c2 SystemOut O DEBUG SMTP: message successfully delivered to mail server
[9/30/23 21:58:53:580 IST] 000000c2 SystemOut O 221 2.0.0 closing connection x13-20020a02970d000000b0042b2df337ccsm5732316jai.76 -
gsmtp
[9/30/23 21:58:53:584 IST] 000000c2 SystemOut O 221 2.0.0 closing connection d17-20020a92d791000000b0035262e1080esm1091460iln.0 -
gsmtp
[9/30/23 21:58:53:584 IST] 000000c2 StartCertific I CWPKI0804I: The certificate expiration monitor finished successfully.