Submit a ticketCall us

Training ClassSign up for Network Performance Monitor (NPM) and Scalability instructor-led classes

Attend our instructor-led classes, provided by SolarWinds® Academy, to discuss the more advanced monitoring mechanisms available in NPM as well as how to tune your equipment to optimize its polling capabilities. NPM classes offered:
NPM Custom Monitoring and Polling
Orion Platform Scalability

Reserve your seat.

Home > Success Center > Server & Application Monitor (SAM) > SAM - Knowledgebase Articles > SSL Certificate Expiration Date Monitor flips states intermittently

SSL Certificate Expiration Date Monitor flips states intermittently

Updated February 19, 2018

Overview

The SSL certificate expiration date monitors are going down frequently or intermittently. Logs for the monitor include the following error:

 

Authentication failed! Closing the connection... Exception message: A call to SSPI failed, see inner exception.
The buffers supplied to a function was too small.

 

Application debug logs for the SSL might include errors similar to the following:

 

ERROR SolarWinds.APM.Probes.SslExpirationDateProbe - Authentication failed! Closing the connection... Exception message: A call to SSPI failed, see inner exception.
The buffers supplied to a function was too small.

Environment

  • SAM 6.2 and later

Cause

The SSL certificate is not found at the exact second SolarWinds tries polling. By default, there is only one retry for a failed connection attempt. If the initial attempt and the retry both fail, the monitor goes down for that poll. 

Resolution

If you see errors similar to the above increase the maximum number of connection attempts from 1 to 3. If the connection is good and the SSL certificate is valid, it is unlikely that all three retries will fail. (This is similar to increasing a timeout.)

To increase the number of connection attempts:

  1. Back up the SolarWinds.APM.Probes.dll.config file.
  2. Stop the Services.
  3. Update the SolarWinds.APM.Probes.dll.config file. Change:

    SSLExpirationDatePollingSettings MaxConnectionAttempts="1"

    to:

    SSLExpirationDatePollingSettings MaxConnectionAttempts="3"

 

The SSL Certificate Expiration Monitor now has the ability to retry a failed connection attempt three times.

 

 

Last modified

Tags

Classifications

Public