Certificate Management

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
jharr
Posts: 1
Joined: Tue Dec 11, 2018 5:24 pm

Certificate Management

Post by jharr »

Is anyone using Nagios to check digital certificate expirations on servers that are monitored? I have a Powershell script to check for certificates that are expiring within a certain time frame. We have approximately 25 servers that we monitor. Can Nagios run the script and show status? Thanks
User avatar
mcapra
Posts: 3739
Joined: Thu May 05, 2016 3:54 pm

Re: Certificate Management

Post by mcapra »

jharr wrote:Is anyone using Nagios to check digital certificate expirations on servers that are monitored?
Yup -- via check_http.
CHECK CERTIFICATE: check_http -H www.verisign.com -C 14

When the certificate of 'www.verisign.com' is valid for more than 14 days,
a STATE_OK is returned. When the certificate is still valid, but for less than
14 days, a STATE_WARNING is returned. A STATE_CRITICAL will be returned when
the certificate is expired.
check_tcp can do this too:
-D, --certificate=INTEGER[,INTEGER]
Minimum number of days a certificate has to be valid.
1st is #days for warning, 2nd is critical (if not specified - 0).
Former Nagios employee
https://www.mcapra.com/
scottwilkerson
DevOps Engineer
Posts: 19396
Joined: Tue Nov 15, 2011 3:11 pm
Location: Nagios Enterprises
Contact:

Re: Certificate Management

Post by scottwilkerson »

Thanks @mcapra!
Former Nagios employee
Creator:
ahumandesign.com
enneagrams.com
Locked