Page 1 of 1

How to configure Signing & Encryption CertificatesExpiryDate

Posted: Sun Jun 04, 2017 6:41 am
by cyient
Hi ,

I want to configure adfs signing & Encryption certificates Expiry Dates in Nagios XI 5.4.3 tool .

Please share the configuration procedure and required plug ins .

we tried with configuration wizard --- Website (Configuration Wizard: Website - Step 1 ) , but it takes the CN for all internal web servers and showing same common certificate

expiry date for all internal web servers . Actually every URL having different certificate expiry dates .


Thanks in Advance
Sridhar

Re: How to configure Signing & Encryption Certificates Expiy

Posted: Mon Jun 05, 2017 10:53 am
by avandemore
If you are referring to the plugin check_http, it's going to check the date of the cert presented by the remote web server. Perhaps you can provide a screenshot of what issue you are having?

Re: How to configure Signing & Encryption Certificates Expiy

Posted: Wed Jun 07, 2017 2:51 am
by cyient
Hi ,

we have added url after that it shows Expiry date 12 Mar 2018 , but actually certificate expiry date is May 19 2018 . All url's are taken default CN (same name *. domain name) .

Please find the attachments for your reference . If you have any plugin for direct monitor certificate expiry dates please provide details .


Thanks in Advance .

Regards
Sridhar

Re: How to configure Signing & Encryption Certificates Expiy

Posted: Wed Jun 07, 2017 12:02 pm
by avandemore
From the Nagios XI CLI, what is the output of:

Code: Select all

# openssl s_client -servername NAME -connect youhostnameusedincheck:443 2>/dev/null | openssl x509 -noout -dates

Re: How to configure Signing & Encryption CertificatesExpiry

Posted: Wed Jun 14, 2017 2:39 am
by cyient
Hi ,

As per your request we have run the command in Nagios cli , the output is attached .

Actually the Certificate Expiry date is Sat May 19 2018 14:12:46 (that is Signing certificate) , but it shows Mar 12 12:00:00 2018 GMT .

So please give the solution for that .

Thanks in Advance

Regards
Sridhar

Re: How to configure Signing & Encryption CertificatesExpiry

Posted: Wed Jun 14, 2017 10:36 am
by tmcdonald
I would double-check what certs you have in place on what sites. That openssl command pretty clearly shows that the expiration is March 12, 2018.