Related to #44650, the documentation about the current behavior is not clear about how warnings for soon-to-expire SSL certificates will be reported.
For health, the documentation says:
https://github.com/spring-projects/spring-boot/blob/6aad22565b5c9d228a8d9a0ed7b1480e698df2c2/spring-boot-project/spring-boot-docs/src/docs/antora/modules/reference/pages/actuator/endpoints.adoc?plain=1#L674-L676
The implementation doesn't really produce a warning, but one can be inferred from the status of a certificate. Specifically, details.validChains.certificates.[*].validity.status will be WILL_EXPIRE_SOON. If details are not enabled, it appears that the warning is hidden.
For info, the documentation says:
https://github.com/spring-projects/spring-boot/blob/6aad22565b5c9d228a8d9a0ed7b1480e698df2c2/spring-boot-project/spring-boot-docs/src/docs/antora/modules/reference/pages/actuator/endpoints.adoc?plain=1#L1259
Similar to health, the implementation doesn't really produce a warning, but one can be inferred once again. Specifically, ssl.bundles.[*].certificateChains.[*].certificates.[*].validity.status will be WILL_EXPIRE_SOON.
We need to improve the documentation to describe how to identify the warning in the response. We may want to keep #44560 in mind when doing so as the current plan is that the concept of WILL_EXPIRE_SOON will be removed from the info side of things.
Comment From: wilkinsona
Blocked by https://github.com/spring-projects/spring-boot/issues/45568.