How to configure Signing & Encryption CertificatesExpiryDate

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
cyient
Posts: 116
Joined: Thu May 08, 2014 4:45 am

How to configure Signing & Encryption CertificatesExpiryDate

Post by cyient »

Hi ,

I want to configure adfs signing & Encryption certificates Expiry Dates in Nagios XI 5.4.3 tool .

Please share the configuration procedure and required plug ins .

we tried with configuration wizard --- Website (Configuration Wizard: Website - Step 1 ) , but it takes the CN for all internal web servers and showing same common certificate

expiry date for all internal web servers . Actually every URL having different certificate expiry dates .


Thanks in Advance
Sridhar
Last edited by cyient on Wed Jun 14, 2017 2:14 am, edited 1 time in total.
avandemore
Posts: 1597
Joined: Tue Sep 27, 2016 4:57 pm

Re: How to configure Signing & Encryption Certificates Expiy

Post by avandemore »

If you are referring to the plugin check_http, it's going to check the date of the cert presented by the remote web server. Perhaps you can provide a screenshot of what issue you are having?
Previous Nagios employee
cyient
Posts: 116
Joined: Thu May 08, 2014 4:45 am

Re: How to configure Signing & Encryption Certificates Expiy

Post by cyient »

Hi ,

we have added url after that it shows Expiry date 12 Mar 2018 , but actually certificate expiry date is May 19 2018 . All url's are taken default CN (same name *. domain name) .

Please find the attachments for your reference . If you have any plugin for direct monitor certificate expiry dates please provide details .


Thanks in Advance .

Regards
Sridhar
You do not have the required permissions to view the files attached to this post.
avandemore
Posts: 1597
Joined: Tue Sep 27, 2016 4:57 pm

Re: How to configure Signing & Encryption Certificates Expiy

Post by avandemore »

From the Nagios XI CLI, what is the output of:

Code: Select all

# openssl s_client -servername NAME -connect youhostnameusedincheck:443 2>/dev/null | openssl x509 -noout -dates
Previous Nagios employee
cyient
Posts: 116
Joined: Thu May 08, 2014 4:45 am

Re: How to configure Signing & Encryption CertificatesExpiry

Post by cyient »

Hi ,

As per your request we have run the command in Nagios cli , the output is attached .

Actually the Certificate Expiry date is Sat May 19 2018 14:12:46 (that is Signing certificate) , but it shows Mar 12 12:00:00 2018 GMT .

So please give the solution for that .

Thanks in Advance

Regards
Sridhar
You do not have the required permissions to view the files attached to this post.
tmcdonald
Posts: 9117
Joined: Mon Sep 23, 2013 8:40 am

Re: How to configure Signing & Encryption CertificatesExpiry

Post by tmcdonald »

I would double-check what certs you have in place on what sites. That openssl command pretty clearly shows that the expiration is March 12, 2018.
Former Nagios employee
Locked