check_http see certificate as near to expiring, not true.

[realtebo]

I'm checking a website certificate (obviously, not really example.com) using

Code: Select all

mirko@nagios:/usr/local/nagios$ ./libexec/check_http -H www.example.com -C 14 --sni -v

Actually it prints

Code: Select all

SSL WARNING - Certificate 'www.example.com' expires in 6 day(s) (2019-06-20 14:00 +0200/CEST).

Navigating with a browser, the certificate results ok, expirying in a year. I installed it some hours ago and my Chrome is seeing it correctly.

[scottwilkerson]

does the certificate have a parent that is expiring?

I just tested on our public server and it reports properly

Code: Select all

# /usr/local/nagios/libexec/check_http -H www.nagios.com -C 14 --sni -v
SSL initialized
SSL OK - Certificate '*.nagios.com' will expire on 2020-06-10 17:59 -0600/CST. 

And that is in-fact when the certificate expires