Hi

Probably not with the blackbox_exporter. Although you can upgrade TCP 
connections to TLS using starttls=true in the query_response, as far as I 
can see this is only intended to be used for line-based protocols since the 
blackbox_exporter will always append a newline to the data (there is a 
similar issue here: 
https://github.com/prometheus/blackbox_exporter/issues/295). So you could 
create a blackbox_exporter module using something like

postgres:
  prober: tcp
  tcp:
    query_response:
      - send: !!binary AAAACATSFi8=
      - starttls: true

to send a startup packet (which basically sends 0x00 0x00 0x00 0x08 0x04 
0xd2 0x16 0x2f to postgres). But since the blackbox_exporter always appends 
a newline, postgres will receive 0x00 0x00 0x00 0x08 0x04 0xd2 0x16 0x2f 
0x0a and throw an error.

Cheers,
Reto
On Thursday, June 3, 2021 at 8:13:11 AM UTC+2 [email protected] wrote:

> Hi,
>
> Is there any way to get metrics out of postgres ssl certs? AFAIK black box 
> exporter can not do it because of the way postgres doing starttls.
>
> /Ihor
>
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Prometheus Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/prometheus-users/8b6c7f4d-df1a-4bbd-a961-6354aa7aec07n%40googlegroups.com.

Reply via email to