microsoft / microsoft/CSS-Exchange
[Issue] - Health Checker Cloud Mail Send Connector TlsCertificateName can present multiple certificates
@lusassl-msft is already working on this.
Since Aug 15, 2022.
- Dominant language
- PowerShell
- Stars
- 1.3k
- Forks
- 395
- Avg merge
- 14h 7m
- Merged PRs (30d)
- 5
Description
Provide Version Number
Provide the version of the script that has the issue.
22.08.09.0638
Describe the issue
Cloud Mail Send Connector TlsCertificateName can present multiple certificates if the certificate is renewed without deleting the old certificate (quite common).
Possible solution would be to present only the most recent certificate who's name matches the TlsCertificateName value.
Note - Send connector references certificate by name and not thumbprint. If several certificates with same name exists Exchange uses the one that has the longest lifetime.
Expected behavior
Present only the most recent certificate whose name matches the TlsCertificateName value.
Script Output
Additional context
Can lead to confusion if the send connector is seen to have an invalid certificate at the same time as it has a valid certificate. As far as I understand there are no issues from having an expired certificate if a new one exists, and it was properly renewed. But I have seen issues for having two much expired certificates in total.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.